Apex - disabling settings URL string / values

I just noticed that the URL of the Apex contains the parameters passed to one of my pages, for example:

http://127.0.0.1:8080/apex/f? p = 103:9:2033022026970021:NO:P9_EMPLOYEE_NUMBER:1422

Is it possible to turn off that I suppose it will be a risk of potential safety in certain applications, especially if the user can hack the URL and remove folders and other things.

Sorry, I was a bit short to explain his...

Go to Page/Protection State shared components/Session. Then click the Page you want to protect, and then assign the Access Protection Page: "+ Arguments must have checksums.

IMHO it should be enabled by default, but alas... it is not (currently).

HTH
Roel

Tags: Database

Similar Questions

  • Apex - disable the button using PL/SQL code

    Hi all

    I use a PL/SQL code to get a DB value, depending on the value that I need to disable the buttons on the Page.

    I tried code below

    IF : P2_FLAG == ' not THEN

    HTP.script ("document.getElementById ("SUBMIT") .disabled = false;", "Javascript");

    END IF;

    It is said screw the page saying - the/apex/f requested URL was not found on this server

    I use Apex 5.0, please need your contributions.

    Hello

    However, if you want to show/hide the button, you can use conditions:

    Open the properties of the button and put Conditions such as "Item = value '.

    Point - P2_FLAG

    Value - N

    To turn on or off, you must run ajax with jquery to get the DB value before charge and then print button.

    It may be useful

    Sunil Bhatia

  • Help debugging: / pls/apex/f requested URL was not found on this server.

    Hi - unfortunately, I was on a hiatus APEX 7 months; I'm a little rusty.

    I'm going back to the application, I was working on that and get some behaviors
    that I don't remember. (Doesn't mean it wasn't there...)

    There is a page in my application (a report page) that once I sail
    for her, an attempt to access any other page in the application (for example to sort the results,
    results go back to the page where the query specs are entered, change a line):

    The/pls/apex/f requested URL was not found on this server.

    The generated url look completely valid and identical, with the exception of the page number,
    for those that are generated by another similar set of pages. Session state protection is
    disabled.

    Ideas?

    Thank you
    Carol

    Carol,

    If you can isolate it on a single page, say the login page after the termination, then you must disable a component on this page both (start with areas) until the problem no longer occurs. Also check the level of the application of the process of calculations and the authorisation schemes.

    It could be a problem with a value of source element / default or a query LOV too.

    Scott

  • How to store the query string value in the scope of the session in webcenter spaces?

    Hello

    I want to store the query string value (which is given from URL) in the sessionScope variable. According to the value of sessionScope beacause I went some components inside my taskflow. Can someone help me how to store this value in the scope of the session. I use webcenter spaces for my application development.

    Thank you

    Ashok.

    Please see the article below

    How to pass a parameter of argument the query URL to a parameter input workflow? (Doc ID 1545808.1).

  • Problem with apex.navigation.popup.url and the symbol + (more)

    Hello
    I use Apex 4.2.6.00.03 in an Oracle DataBase 11g.

    I want to show in a popup over information about a line in a report, to do this, I use apex.navigation.popup.url JavaScript function to open an apex page and set a variable in this page with the ROWID of the register, the url is

    JavaScript:apex.navigation.Popup.URL ('f? p = & APP_ID.:59: & SESSION.: P59_ROWID: #ROWID #');

    It works fine, but when the ROWID contains a symbol '+', it is replaced with a space when the value is set to the article and the code that uses this value returns an error.

    Oracle Docs the ROWID can have letters, numbers and symbols '+' and ' / ', I tested it with "/" and it works fine.

    I could use the replace to replace the space with a '+', but I want to know if this can be corrected in the URL, and what other symbols he affects.

    Thank you

    Diego (SniperCat) wrote:

    I use Apex 4.2.6.00.03 in an Oracle DataBase 11g.

    I want to show in a popup over information about a line in a report, to do this, I use apex.navigation.popup.url JavaScript function to open an apex page and set a variable in this page with the ROWID of the register, the url is

    JavaScript:apex.navigation.Popup.URL ('f? p = & APP_ID.: 59: & session.: P59_ROWID: #ROWID #');

    It works fine, but when the ROWID contains a symbol '+', it is replaced with a space when the value is set to the article and the code that uses this value returns an error.

    Oracle Docs the ROWID can have letters, numbers and symbols '+' and ' / ', I tested it with "/" and it works fine.

    I could use the replace to replace the space with a '+', but I want to know if this can be corrected in the URL, and what other symbols he affects.

    That's why I only spend the alphanumeric key values as URL parameters. It could affect all the reserved characters in the URL.

    Add a hidden column of ROWID_URL to the report query, that JavaScript and URL does not escape the ROWID value:

    select
       ...
     , apex_escape.js_literal(apex_util.url_encode(rowid), null) rowid_url
     , ...
    from
       ...
    

    and use this column in the column link URL:

    javascript:apex.navigation.popup.url('f?p=&APP_ID.:59:&SESSION.::::P59_ROWID:#ROWID_URL#');
    
  • How to use CFPARAM with a list of string values

    Hi all

    I have a field value that can be stored with multiple values for a single record: Work_Order = '555555,666666,111111' (note that these are actually stored as a single string value in the comics with commas.)

    I need to analyze this field and enter a new query clause where the string values:

    < CFSET WOIDS = CapProjects.Work_Order >

    < cfloop condition = "#find(',,',WOIDS) #" >

    < cfset WOIDS = "#rereplace (WOIDS, ',',', null, ',' ALL') #" > < br >

    < / cfloop >

    < cfquery name = "CapProjectsWOIDS" datasource = "#URL. DB #">"
    SELECT [ENGOPSMTRLSID]
    [Work_Order]
    OF ENGOPSMTRLS
    WHERE
    < CFOUTPUT >
    ENGOPSMTRLSID = #URL. INDEX #.
    < / CFOUTPUT >
    AND
    < CFOUTPUT >
    Work_Order in (< cfloop index = list "idx" = "#variables.) WOIDS #">"
    < cfqueryparam
    value = #WOIDS #.
    cfsqltype = "cf_sql_varchar".
    list = 'true '.
    (/ > < / cfloop >)
    < / CFOUTPUT >
    < / cfquery >

    I'm doing this right? I get the following error: error running query database. [Macromedia] [SQLServer JDBC Driver] [SQL Server] Incorrect syntax near '@P4 '. What's the length of the loop? How do I drop?

    Thank you

    John

    First of all, you need not use CFOUTPUT in a CFQUERY (or most / all other CFtags)-CF knows.

    Second, you need not complete a list for an 'IN '.  Unless you use a dark database is not MS - SQL, MySQL or Oracle.  And you already know that CFQUERYPARAM has an attribute from the list.

    NOTE: This assumes that the Work_Order data type is char or varchar, not whole.

    
      SELECT [ENGOPSMTRLSID]
          ,[Work_Order]
      FROM ENGOPSMTRLS
      WHERE  ENGOPSMTRLSID = #URL.INDEX# /* <--- I didn't see URL anything, before this.  And I REALLY cannot stress how bad of an idea it is to use a URL variable for your DSN.  Just sayin'.  */
    AND
      Work_Order in  ()
    
    

    Given that you use for the varchar type, you must put quotation marks around the value (line 08), as I have demonstrated.

    HTH,

    ^_^

  • How to use a String function Find() during a Test of a string value?

    Hello

    I intend to match a substring of the string returned by my USE when the use of a string value test - call of VI.

    I write the string returned for a string variable local (Locals.data_read) and tab limits - under the expected string value using Find (Locals.data_read, 'Connected'). When I check the expression to find errors - I get a warning "expected a string number found {comma floating 64}.» This value will cause a runtime error. »

    What Miss me?

    Thank you

    Kech

    Here is an example showing both.

  • Save the alphanumeric string value

    Hello!
    How to save a value to a variable so that I can use it in the future? I have a string of output of a case structure proposed by an OK botton. I want to save the string value when I press the ok botton...
    Thanks in advance
    GM

    Just write the string in a text file.  When you want to use it later, to read the text file.

  • Have to reset the flag of string value

    Hello everyone

    I'm trying to reset the flag of string value.

    I use node string indicator property to change the color, its evolution, but when the program runs again it should start default how to do it. Thanks in advance

    Here, it's in 2009

  • Put the string value in a table

    Hello

    Probably an easy question, but I am reading data of a RFID reader that returns a string value of 12 bytes. Whenever a RFID reads, I want the tag to be inserted in a string table on the front panel. So, basically, a newspaper of the each tag [read-> Insert row 0] then [read-> Insert level 1] and so on. I work RFID reader, I don't know how to put the string in the table.

    I'm not sure of the steps necessary to achieve control of the table (or if the table control is the right thing to use).

    Any help would be greatly appreciated. Thank you.


  • Switching between 2 string values

    It is probably a trivial question, but how to move between 2 string values to send to an entry of a larger chain of concatonated function. The values need to be changed every 100ms or so.

    Thank you

    mhaque

    You're right, it is trivial.

    Best regards

    Balze

    P.S.: Attachment VI LV2009

  • Could not save the different string value to each element of the array

    I have a configuration of VI to read several channels Veristand project.  The entrance is a table 1 d of channels, (an element for each channel, I want to read).  The channels have different names, each of the elements in the chain must be different.  I am able to edit each item and run the VI, and it works fine.  However, if I save, close and reopen the VI, all elements show the same value (what happens to the value of the last element for which I defined a default value).  Is this behavior planned, or have I missed a configuration setting which would allow different string values?  Please notify.  Thank you.

    GSinMN

    Make sure that you select the table and not only one item when you right click-> set by default on the front panel.

  • Can I pass a string value to a double digital display?

    I do a test sequence and save each test datas. When I get around one of the tests, I need the string value "BP" to be saved (in double digital indicator) for this particular criterion. Is there a possible way to do it?

    Maybe just use "NaN" instead of "BP". You can store a NaN in the digital indicator.

  • Disabling settings rate call MX 300

    Hi all

    We recently purchased some end points of Cisco MX300 G2 (registered in the VCS). Endpoints are running software version TC7.3.4.e4daf54. The question I have is with respect to disable settings 'Rate to call' user interface all in composition. I looked around one I am unable to find an answer to this. Basically I want to lock without giving the user an option to change the rate of calls etc.

    Someone has all the ideas/help!

    Thank you all

    Navin

    You can set the call rate by default which will use the new calls, it is not possible to lock the rate of calls to a specific setting and prevent it from being editable if the user wants.

    If there is a feature you want, suggest that you only contact your account manager, they can create a feature request for you.

  • ADF disable display based on value objects

    Hello

    I've seen object on my page and I want to disable based on the value.

    If #{bindings. PROCESS_STAGE.inputValue == 'stage1'}' then my VO work on another page work (no database queries).

    Could dear gurus, you give solutions for this case? Thank you

    Thanks for the reply. I'm ovverided executeQuery() in VOImpl but my work still VO despite if (false).

    public class CorrectRuleVOImpl extends ViewObjectImpl {
        /**
         * This is the default constructor (do not remove).
         */
        public CorrectRuleVOImpl() {
        }
    
        @Override
        public void executeQuery(){
    
             if (false)
                 super.executeQuery();
        }
    }
    

    But it works very well!

    @Override
        protected void executeQueryForCollection(Object object, Object[] object2,
                                                 int i) {
            if(false){
                super.executeQueryForCollection(object, object2, i);
            }
        }
    

Maybe you are looking for

  • How can I remove the title of the Email and date/time printing even?

    Hi people,First of all, thanks to everyone at Mozilla Thunderbird and Firefox!I want to do is eliminate the subject of the E-mail (top left corner) and the date and time (lower right corner) when you print an email.Thanks in advance... Mark

  • A few questions on Satellite Pro S300-121

    Hello We bought 12 of these laptops last July, I installed Windows XP Pro but have had problems with about 5 of them on and outside since then. The main problem is no output to the screen, power light turns on but no screen output, only medium diffic

  • Windows is loading files...

    This has happened to me for a while now. I start the computer, if I forced mode it asks if I want to get into the Safe Mode, Mode safe mode with networking or normally.I usually go on the network in safe mode, because of the error on blue screen on N

  • My Doc and photos disappeared.

    WHAT HAPPENED TO MY FAVORITES/DOC AND PHOTOS? THEY DISAPPEARED WHAT HAPPENED TO MY FAVORITES/DOC AND PHOTOS? THEY HAVE DISAPPEARED. I CAME HOME AND MY COMPUTER UPDATED AND NOW I CAN'T FIND ONE OF MY PHOTOS, DOCUMENTS, OR FAVORITES. HOW CAN I GET BACK

  • Japanese language support

    I think to buy a new computer that has installed Windows 7.  However, I can't find out what version of Windows 7 is required.  I currently use XP and the base language is English.  However, I also have the feature of Japanese language installed in XP