APEX SDLC issues

Similar Questions

• APEX URL issues

  Hello world

  I use APEX 5.0 alongside REST services.

  My url is as below:

  http://serverAddress/name/f?p=:

  How can I change this url so that she had my own naming conventions and does not show the parameters passed.

  For example instead of:

  f? p = & APP_ID.:5: & APPSESSION.:NO::P2_ID:1234

  I want something like

  process_data/application_name.

  which does the same thing.

  Thanks for the help.

  You can start watching here

  Kris blog: Nicer URLS for APEX, yet another option

  common search term is "apex oracle prettify URLs.

• Manipulation of checksum by possible client - Apex security issue

  Hello guys! I was just wondering if the checksum calculated in session state protection can be calculated by a client.
  Suppose an attacker modifies the criteria in the url and provides a checksum matching, that he wanted to succeed in hacking of the app.
  
  I wasn't able to find anything about the successful handling of checksum but don't know whether or not it is absolutely impossible!
  
  Thanks for your replies!
  
  SEB

  You will find a more detailed explanation here http://download.oracle.com/docs/cd/E17556_01/doc/user.40/e15517/sec.htm#CHDDAJHF

  At a general level, that's what you need to do
  1. sharing of Session State Protection components - enable
  2. at the level of the Page change the security and Protection of Access Page the value no URL access
  3 change the branches to the Page (not the default Page and the URL)
  4 conduit to more than coding to remove the parameter passing (good for bad security for coders)
  If you want to see what I mean in Action, to do this and continue to look at the URL
  a. to open an Application in Application Builder
  b. click on create new page
  c. Select Assistant
  d. click Next and suddenly see wwv_flow.accept ! No page, no session, not nothing. You can do this in your application Apex too because too lettering Builder was built in the Apex.
  Kind regards

• Apex URL connectivity.

  You don't have permission to access to the/dev/apex/apex on this server. -Is the error showing when I am trying to connect via this link
  http://SIS-prosun07:7777/dev/apex /.
  
  Issue began this way:
  
  I needed to create a workspace, so I tried to log into ADMIN but unfortunately given wrong password 3 times which made it lock and when trying to reset the ADMIN password by running @apexcnpwd.sql it lifting error as password validation failed but we follow-up rules of the password as 1 caps , 1 alphanumeric, etc.. I tried Goodday123 and Niceday123$ and many others but he agreed and I guessed just like his not accepting because of the version we use APEX 4.2 and may be the file is the old version, but I did not try anything in this assumption... After that I just checked user status DBA_USERS and APEX_040200 and APEX_PUBLIC_USER and FLOW_FILES were in the expired State. APEX_040200 and APEX_PUBLIC_USER were in the locked State also for that as we do not know password then I changed the password to unlock it and make it OPEN State... But unfortunately, after doing the above mentioned URL no longer works... I felt that I made a mistake by changing the password of APEX_PUBLIC_USER and do not even update in the file dads.conf... So, we have configured dads.conf file also, but always URL did not work... And just guessed and restarted apache server and its suddenly started working... But still unable to change the password of ADMIN as password validation same error failed... Finally, in this scenario we are opening file apexchpwd.sql to see what is matter and unfortunately it's file as defined in the schema file was APEX_040100 that we changed to APEX_040200 and finally has been changed successfully and restarted Oracle HTTP server...
  
  Not my doubt in this scenario, is what exactly is my mistake I spoke a lot of documents, but I just don't know if because I changed the password of users APEX_PUBLIC_USER and APEX_040200 so URL stopped working or because of the ADMIN got locked so question came... Or even before requests for password changing worked very well and just ADMIN password only had a problem but as I changed URL is not opened and the DEV team was idle for hours or well like we restarted the server apache immediately worked URL then is - this problem was of the Apache server. . Pls suggest what was my mistake right and much more on this case... However the problem is resolved, but I want to understand in a profound way so that again, even should not happen...
  
  Kind regards
  Nitesh.

  Hello

  Nitesh. wrote:
  I do not understand why it should be APEX_0402000 in the locked state.

  APEX_0402000 schema is locked by default after installation of the APEX.
  This database user is not necessary for any connection.
  State of the APEX instance ADMIN user or password are not something to do with connections or users of database.
  You must unlock only user witch are used by the web server to connect to the database. In your case, it is APEX_PUBLIC_USER.

  Nitesh. wrote:
  And you mean that if we change APEX_PUBLIC_USER password, you must configure file dads.conf right... His we use mob_pl/sql, so I should have set this file as soon as changed right password...

  Yes, that's correct.

  Nitesh. wrote:
  What is the role of the account anonymous here can not understand that its also designed for HTTP access and it remains always locked but then why has the CREATE SESSION system privilege...

  ANONYMOUS is usually used with Embed PL/SQL Gateway (EPG). If you don't use EPG, you can block this user database.

  Kind regards
  Jari
  -----
  My Blog: http://dbswh.webhop.net/htmldb/f?p=BLOG:HOME:0
  Twitter: http://www.twitter.com/jariolai

• How to display a sign $ in the item

  Hello

  I have so I would view the $ sign in the element "balance". This is a read only element populated of DA on the loading of the page.

  the column is a number and NOT have any sings $ stored in it.

  I would like to know how can I format the number in the format that is easy to read ($ 999,999,999.99) without using to_char() or update data in the column.

  In a report or item of regular shape?  APEX 5, issue 42, in a form, you can put the $ as a pre-text element, so it will add before the $ field...

  Thank you

  Tony Miller
  Los Alamos, NM

• The consecutive processes share the same database session?

  Assuming that we have two processes on the same page, which are performed one after the other. Can we depend on that they are running within the same database session?
  
  For example it is possible to define a database (sys_context) context in the first process, and refer to this context within a second (e.g. process DML).
  
  Or asking in other words: is the session DB from the pool of connections apex reused or returned to the connection pool after the first process?
  
  It's a little difficult to control, because only the negative case would be suffient to say it doesn't work that way. Just because the 10 tests on 10 worked will not guarantee that it is always the case.
  
  Published by: Sven w. on June 28, 2012 15:04 - typo correction

  Sven wrote:
  Assuming that we have two processes on the same page, which are performed one after the other. Can we depend on that they are running within the same database session?

  For example it is possible to define a database (sys_context) context in the first process, and refer to this context within a second (e.g. process DML).

  Or asking in other words: is the session DB from the pool of connections apex reused or returned to the connection pool after the first process?

  The same session of database is used for the duration of 'see the page' or 'accept the page' request. If a 'direct branch' (direction of the page without using the redirect) takes place after "accept page" the same session of treatment, is used to display the new page. See the use attributes initialization PL/SQL/cleaning of Code PL/SQL Code .

  However, several operations may be involved, as APEX will issue engages on different session state changes.

• How to set up the security and Notification

  Hi, I developed a small application for logging calls. I would like to know the procedure of implementation of security and notification settings.
  
  As I am new in this area, please explain in detail. Screenshots showing the configurations ([email protected]) would be highly appreciated.
  
  The main features and the application procedures-
  
  (a) users will see different usernames and passwords to trigger calls on a particular service
  (b) each Department has a call manager that will assign the call to a technician
  (c) the technician will solve the call and update status
  (d) the user will close the call and provide feedback
  
  Structure-
  
  1 table to keep users / employees - 1 Page - report and form
  1 table to manage call manager Department wise - 1 Page - report & form
  1 table for calls (stimulus, assign, resolve) - report and our multiple pages (one for the recording, one for the assignment, to solve and feedback with only the corresponding columns of the table) - I have created multiple forms, whereas a call can only be changed by a subsequent user)
  
  My requirement:
  
  1. the user must consult only the calls raised by him or her (User1 should not see the calls raised by user2)
  2. the technician should show the call triggered by her (user role) and can also view calls assigned
  3. the call manager can check the calls raised by him (user role) and can also show calls raised on his Department
  4 notification: email should be fired in each event only for the persons concerned, added to the call (the user handler calls, technician)
  
  
  Please guide me to implement the features above.
  
  Kind regards
  Sandeep

  sandeepmallik wrote:
  Thanks for the reply.

  About the e-mail notification-, we can create a process under 'Treatment of the Page' for email. In the field 'To' we can provide the string id or replacement of static mail to send mails.

  Not recommended. When generating the e-mail notifications in the way that you need to modify data and sending of the email must be processed in the same transaction to ensure that you don't have change without email or email without modification. Where the suggestion of creating packages of procedures that encapsulate these transactions.

  There are a number of non-obvious events which will cause the APEX to issue a commit which will close a transaction. So, you want all of your transaction in a program unit, called within a single process to the APEX. Packages are the best way to do it.

  How to create the substitution string so that we can get the mail electronic id of the table using SQL? We use several channels alternative if we want to send the same mail to multiple recipients?

  Use apex_mail API with varying normal SQL and PL/SQL in your procedures.

• cover of "no data found" message in the interactive report

  I have looked around and cannot know what is happening. Any help would be greatly appreciated.
  
  I have an interactive report that, when no data is found, displays the message "no data found" wrapping tight. I have uploaded a screenshot of it to TinyPic for you to see what I see.
  
  The HTML code generated around the text "no data found" is the following.
  
  >
  < DIV id = "apexir_DATA_PANEL" >
  < TABLE summary = "" >
  < TBODY >
  < b >
  < TD >
  < TABLE id = "12352007490697832" class = "apexir_WORKSHEET_DATA" border = "0" cellSpacing = "0" summary = "" cellPadding = "0" > "
  < SPAN class = "fielddata" >
  No communications have been found in the system.
  </span >
  < /table >
  < Table >
  < /TR >
  < Table >
  < /TR >
  < / TBODY >
  < /table >
  < / DIV >
  >
  
  I looked in the HTML code that is generated for the page, but cannot understand why words are packaging. Any thoughts?
  
  Shane.

  Hello

  I see exactly what is happening. It could be your theme that does this - or maybe you are using the version of Apex.

  I just did a test (with Apex 4, issue 18), and as though all the tags TABLE, TR and TD, I get a SPAN tag around the text:

  <span class="fielddata">No submissions were found in the system.</span>
  

  Try adding COVER tags around your text and see if that helps.

  Andy

• Use of multiple instances of the same browser...

  Hi people,
  
  I have a question...
  I inherited a large APEX application, it uses Oracle SSO to log.
  
  We are migrating the application to a new set of servers and run regression tests.
  Testers are connecting using IE6 and multiple instances of the application both on the oldTest newTest servers and opening.
  
  If at some point, you can:

  an application Admin user (username ADMINTEST123)  logged into the application on oldTest
  an application Admin user (username ADMINTEST123)  logged into the application on newTest
  
  an application standard user (username TEST123)  logged into the application on oldTest
  an application standard user (username TEST123)  logged into the application on newTest

  Is this supported?
  
  Could someone tell me or direct me to the documentation or the thread that lists which is supported / unsupported for use of browser with APEX and SSO?
  
  Thanks in advance,
  Gus...

  So this can I conclude that what you say and the above results we could get questions if connection users and open new windows in this sense?

  Yes, if users connect or not, if requests for pages using the same session of apex are issued different browser instances, the results may be undesirable.

  Scott

• Download of large tables (&gt; 50000 lines)

  Hello
  
  I couldn't Download CSV files in an interactive report if the results are very large, the same thing happens if I try to 'download of data' text. Breaks downloads after a while and my browser shows: interrupted connection.
  
  I use Apex Oracle 9iR2 3.1 or 3.1.2 on Oracle 11 g 1 material Apex.
  
  BTW: I use the modplsql interface.
  
  Can someone help me?
  
  Wolfgang

  Hi Wolfgang,.

  I don't think that it is an APEX specific issue as the limit for interactive reports to CSV is 65536 (please see: interactive report-.) CSV download limit of 65536 lines this could be a problem of Apache configuration.

  Martin

  -----
  [http://apex-smb.blogspot.com/]

• APEX Logout / Login issues.

  Hi all

  I use APEX 5.0.1 and created a custom authentication based on the table.

  In the table, there are USER ID and CUSTOMER ID columns.

  For example: Userid = USERTWO

  CUSTOMER ID = CLIENT-ABC

  When we connect to the application usually in the upper left corner, it will display the USER ID that currently connect in the application as below.

  

  Issues related to the:

  1 is it possible instead to display the USER ID, I want to display the CUSTOMER ID? If so, how?

  2. when we logout, is possible that we can close the page instead of back to the page to login or to redirect to another URL?

  Please give me some advice / guidance on these issues.

  Thanks and regards,

  Troy.

  (1) content here is defined in the list of navigation bar, located in the shared components. This entry will probably be user & APP_USER. as the label if you can change this to your own domain.

  (2) would be probably a few ways to do this, even if I never tried. The logout url is defined in the current authentication scheme. You can change this option to include a request in the login page that will trigger a dynamic action to close the window.

  That is to say:

  f? p = &: LOGIN::CLOSEME AUTH_APP.

  Then add DA with condition

  : ASK = "CLOSEME."

• APEX dynamic Action issue with custom button template

  A new day and a new problem. -.-

  I wanted to create a dynamic action, if a button is clicked and got the error "the selected button uses a 'button model' which does not contain the #BUTTON_ID substitution string #. So I googled a bit und found issue with action Dynamics apex. I thought that this would solve my problem and I looked in the model button to find this:

  <table class="t15Button" cellspacing="0" cellpadding="0" border="0"  summary=""><tr>
  <td class="t15L"><img src="#IMAGE_PREFIX#themes/theme_15/button-l.gif" alt="" /></td>
  <td class="t15C"><a href="#LINK#">#LABEL#</a></td>
  <td class="t15R"><img src="#IMAGE_PREFIX#themes/theme_15/button-r.gif" alt="" /></td>
  </tr></table>
  

  A former colleague created the model itself and I do not know where to insert the #BUTTON_ID #. Does anyone have any suggestions?

  Concerning

  Chris

  Miss you atrribute button ID,

  is the correct code

  
  
  #LABEL#
  
  
  

  I hope this works.

  Go

• Apex in IFRAME cookie issue (P3P (IE6 +))

  Hi all

  I'm having a problem with IE not displaying no not my content in an IFrame - due to the EI trust don't not cookies from the Apex.

  This issue has been resolved on the Apex forum in 2009 - https://forums.oracle.com/thread/887792

  The solution was to set policy P3P response header from the web server:

  For example

  1 PHP

  header ("P3P:CP =" IDC DSP COR ADM DEVi tail PSA PSD IVAi IVDi CONi HIS OUR IND CNT"');

  2 ASP.NET

  HttpContext.Current.Response.AddHeader ('p3p', ' CP =------"IDC DSP COR ADM DEVi tail PSA PSD IVAi IVDi CONi HIS OUR IND CNT\" "" ");

  3. apex solution

  I have add this section to the file httpd.conf (Apache proxy)

  * < IfModule mod_headers.c > *.

  ' Defined header P3P "policyref=\"/w3c/p3p.xml\", CP =-"NOI DSP COR CUR ADM DEV BUS\ OUR NEST""

  * < / IfModule > *.

  
  

  Now, I have the same problem but I am hosted in the cloud.

  
  

  Here is a page with my built-in content - (Bradford United): test the widget - SACU

  
  

  It works fine on chrome/firefox...
  

  
  

  Is there another way to define the P3P header in the cloud of the database?

  
  

  A big thank you

  
  

  Steve

  Hi Christian,

  Thanks for looking this...

  That has not fixed it :-(

  However, I used to inspect response headers and found that unless the page I was trying to access has been LOGIN_DESKTOP so the answer has been: 302 moved temporarily

  Content (coded: 0.24 KiB / decoded: 0.37 KiB)

    
  This document you requested has moved temporarily.
   
  It's now at https://production001-demandanalysis.db.em1.oraclecloudapps.com/apex/f?p=20300147:111:0:::::">https://production001-demandanalysis.db.em1.oraclecloudapps.com/apex/f?p=20300147:111:0:::::.
   
  

  This may have caused the error in the iFrame...

  So I changed the Home URL and the URL to connect to: f? p = &: 111:0 APP_ID.

  and it now seems to load correctly :-)

  Thanks again

  Steve

• Color apex 4.2 issue 26 theme space reserved

  The problem is in Firefox 17, the placeholder color is too dark in color and very difficult to distinguish from a real field value.
  
  Find out the location of this link date field using firefox and chrome
  http://Apex.Oracle.com/pls/Apex/f?p=67147:2
  
  Color Chrome 23 is perfect.
  
  Is it a browser issue or a theme issue?

  PC8888 wrote:
  The problem is in Firefox 17, the placeholder color is too dark in color and very difficult to distinguish from a real field value.

  Find out the location of this link date field using firefox and chrome
  http://Apex.Oracle.com/pls/Apex/f?p=67147:2

  Color Chrome 23 is perfect.

  Is it a browser issue or a theme issue?

  It is a decision of implementation in Firefox. You need to add a CSS rule for the style of the text placeholder in Firefox:

  input:-moz-placeholder {
      color: #a8a8a8 !important;
  } 
  

• Upgrading from 4.0.2.00.08 to 4.1.1.Any APEX probs or compatibility issues?

  Hi all
  I a m planning the Application Express 4.0.2.00.08 to 4.1.1 upgrade.
  There will be problems of compatibility or conflict likely to occur?
  
  Thanks and greetings
  Umer

  Hi Umer,

  According to customer relationships I would expect that there are no conflicts or compatibility issues when you upgrade to point 4.1.1.
  Only in the field of custom authentication schemes it might be hickups because this area much changed in 4.1.1
  but it really depends on how your custom authentication scheme consistent standard is.

  Concerning
  Patrick
  -----------
  My Blog: http://www.inside-oracle-apex.com
  APEX Plug-Ins: http://apex.oracle.com/plugins
  Twitter: http://www.twitter.com/patrickwolf