APEX URL in a production environment

Since the URL will be display (value: element) variable when you link between pages, or even create manually. A technical user can change just the value of the URL itself correct?

Take for example this URL:

http://Apex.Oracle.com/pls/Apex/f?p=46976:7:619658001914051:no:RP:p_BOL, p_BOOKINGNO:1631 A 00565, 1631 A 00565

I could go and swap "A 1631, 00565" with another number, that number could be a number, not associated with this user.

Are you able to hide the URL string?

Or it's just the way it is and I have to put in the postings of user on my entry sql?

Jeremy-

You should take a look at the Protection of the State of Session. This feature of APEX ensures the security surrounding the issue you describe.

http://download.Oracle.com/docs/CD/E17556_01/doc/user.40/e15517/sec.htm#CDDGIGJH

Austin

Published by: AustinJ on August 3, 2011 10:49
Link added

Tags: Database

Similar Questions

  • Error 401 during the passage of the assessment of the production environment

    Hello

    We recently moved our application for assessment of the production environment by using the credentials provided by the Push of BB Services, only to find out that we receive an "HTTP 401 - PushServiceId/password status invalid in the authorization HTTP header" whenever we try to send a push notification.

    We do not have change our code (which works very well using assessment data) at all except for his replacement by credentials. We use the URL https://cpxxx.pushapi.na.blackberry.com/mss/PD_pushRequest to send our push notifications, where xxx is the CPID provided by BlackBerry, and we're certainly using the password for the initiator to push (instead of the password for the portal content provider).

    Needless to say that we are base64 encoding app id and the password in the header, and as I said if switch back us to the environment assessment (change credentials), everything works fine.

    This becomes a problem, I would appreciate help if someone was faced with a similar problem.

    That's all. He works with the new credentials.

    Thank you.

  • ORDS3.0EA can be used in a production environment

    Hello:

    I had planned to launch a project to deploy a Web service with ADR 2.0 and probably with Apex.

    But now ORDS3.0 EA was released. I can deploy without apex, and it has a function to simply deploy webservice.

    So now I need to decide whether to use ORDS2.0 or 3.0 in my project.

    EA can be used in a production environment? Can the project to have a month or two for the kickoff, if I have a question in the EA version, I raise a SR on EA version?

    Please consult the readme.html in the distribution, as he says it, EA builds are NOT supported for production use

  • How to make a request on a URL using webworks development environment?

    Hey geeks,


    How to make a request on a URL using webworks development environment?


    Thanks in advance...!

    "A request for a url" you try to perform an ajax call and it does not work? Any field/origin you're wanting access must be white listed in a element in the config.xml file. Details of this are in the WebWorks development guide

  • Apex URL incorrect syntax

    Apex 4.2

    I'm working on an Apex URL that performs a process and branches to a page. I did search for the URL and am aware of how they work and how to make them and also used in the past. Apparently, I'm not as knowing that I thought that I'm faced with some problems. So there you go.

    (1) I have a basic report based on table ASSOCIATIONS

    CIT_ASSOC_XREF_ID (PK)

    CITATION_ID

    CITATION_NAME

    ASSOCIATION_ID

    Region report, or a query, that displays my report is the following:

    SELECT CIT_ASSOC_XREF_ID, CITATION_ID, CITATION_NAME, ASSOCIATION_ID, 'Link'
    FROM ASSOCIATIONS
    WHERE CITATION_ID = :P11_CITATION_ID
    

    One of the columns (link) I changed to a link column. Than that of the link column, I have the following:

    javascript:apex.submit({request:'SAVE',set:{'P11_RUN_REMOVE_CIT_ASSOC_FL':'Y'}});
    

    The URL works fine. I'll put a flag so that I can use in the conditional (point value / Expression 1 column = Expression) 2 of a pl/sql which I want to run and process in a branch. The problem occurs when I try to introduce a new parameter in my URL. The following URL does not work:

    javascript:apex.submit({request:'SAVE',set:{'P11_RUN_REMOVE_CIT_ASSOC_FL,P11_CIT_ASSOC_XREF_ID':'Y',#CIT_ASSOC_XREF_ID#}});
    

    It is not yet sail or send the page. It's always a clickable link, but even once, the page does nothing. Am I missing something? I'm out of quotes or something? This is not allowed. Any help on this would be great. Thanks in advance.

    NewApexCoder wrote:

    Apex 4.2

    I'm working on an Apex URL that performs a process and branches to a page. I did search for the URL and am aware of how they work and how to make them and also used in the past. Apparently, I'm not as knowing that I thought that I'm faced with some problems. So there you go.

    (1) I have a basic report based on table ASSOCIATIONS

    CIT_ASSOC_XREF_ID (PK)

    CITATION_ID

    CITATION_NAME

    ASSOCIATION_ID

    Region report, or a query, that displays my report is the following:

    1. SELECT 'Link', CITATION_NAME, CIT_ASSOC_XREF_ID, ASSOCIATION_ID, CITATION_ID
    2. ASSOCIATIONS
    3. WHERE CITATION_ID =: P11_CITATION_ID SELECT CIT_ASSOC_XREF_ID, CITATION_ID, CITATION_NAME, ASSOCIATION_ID, 'Link' OF ASSOCIATIONS WHERE CITATION_ID =: P11_CITATION_ID

    One of the columns (link) I changed to a link column. Than that of the link column, I have the following:

    1. JavaScript:apex. Submit({Request:'SAVE',Set:{'P11_RUN_REMOVE_CIT_ASSOC_FL':'Y'}});)

    The URL works fine. I'll put a flag so that I can use in the conditional (point value / Expression 1 column = Expression) 2 of a pl/sql which I want to run and process in a branch. The problem occurs when I try to introduce a new parameter in my URL. The following URL does not work:

    1. JavaScript:apex. Submit({Request:'SAVE',Set:{'P11_RUN_REMOVE_CIT_ASSOC_FL,P11_CIT_ASSOC_XREF_ID':'Y',#CIT_ASSOC_XREF_ID#}});)

    It is not yet sail or send the page. It's always a clickable link, but even once, the page does nothing. Am I missing something? I'm out of quotes or something? This is not allowed. Any help on this would be great. Thanks in advance.

    You're confusing URL and JSON syntax. APEX URLS use lists separated by commas in the positions of itemNames: itemValues of the URL:

    f?p=100:11:1234567890::::P11_RUN_REMOVE_CIT_ASSOC_FL,P11_CIT_ASSOC_XREF_ID:Y,#CIT_ASSOC_XREF_ID#

    The used JSON in the set option of the apex.submit method uses pairs of name: value:

    javascript:apex.submit({request: "SAVE", set:{"P11_RUN_REMOVE_CIT_ASSOC_FL": "Y", "P11_CIT_ASSOC_XREF_ID": #CIT_ASSOC_XREF_ID#}}); // Quote #CIT_ASSOC_XREF_ID# if it's not a number

  • On the VSAN architecture in production environment

    Hi guys.

    What is the best architecture VSAN for a production environment?

    All in one VSAN witch cluster storage and VM on the same cluster or node have a VSAN cluster 2 cluster and another with a virtual machine, only that store a virtual disk on the VSAN cluster?

    Thanks in advance.

    If I understand the question, then you don't have the choice with the current versions of the VSAN.

    In order to access the database VSAN, the virtual machine must be deployed to an ESXi host computer that is part of the VSAN pole.

    The VSAN data store can be exported outside to ESXi hosts that do not participate to the VSAN cluster.

    HTH

    Cormac

  • URL of default product in case of multiple catalogs

    I have a strange situation with a configuration of ecommerce.

    Customer has a product in the two catalogues. One for the general public and the other for wholesalers (behind a secure area).

    The URL of the product are so something like:

    in line-shop/sub-sub-catalog/product-name

    and

    wholesalers/sub-sub-catalog /-name of the product

    Now, on the public site, they have a product that has the above designated product as a Up-Sell/Cross sell related products.

    The problem is that BC renders the URL of wholesalers for this product when it is listed as a related product, so public users get a page access denied when you click on this product.

    I first thought that affecting the canonical URL to the URL of the public catalogue will arrange but it had no effect.

    BC seems to use the latest catalogue (in alphabetical order) which is attributed to the product as the default URL.

    So the only way I can see to resolve this is to rename catalogs to change the alpha order - but is obviously not if possible.

    (but then the wholesale customers will have something similar, though not as bad)

    I don't think that we can access the different product URLS via module_data / liquid and adjust the product URL programmatically assimilated? or can we?

    Can't think of a way to solve this problem?

    I have the same problem. Upsell-Cross sell products jumping around to one of multiple catalogs not the value default language (or the top of the list).

    Links get generated by the present: the displayed catalog would be chosen on the ID account less.

    ID # are generated in the system.

    You can use the URL redirects.

  • BIEE 11 g, how could I Stéphane newspaper in a new production environment page?

    I want to Stéphane, the login page in the environment from development to a production environment,

    any suggestions?

    You need to work on the location of \FMW\Oracle_BI1\bifoundation\web\msgdb\pages\common\signin.html and page signin.html

    Copy of files like regular might work

    ~ http://cool-bi.com

  • Set up a pre-production environment...

    My current employer has a pre-production environment that is being updated nightly from the production. I started to look at how it is done (powerCLI script) and I'm trying to make things better.

    Here's how it works.

    A snapshot is taken of production servers, which 'freeze' the base vmdk disk. A new virtual machine is created for pre-production and it uses the 'frozen' drive to the production server database, because it is not persistent mode, clean disc. Of course, the virtual machine is connected to a group of isolated ports. Basically, this allows the team dev/infra to have an identical copy of the production servers anytime (just run the refresh script).

    While this works very well, I have a problem on using disks of production for this purpose. Usually, I prefer to leave only one production and complete clones have either fully provisioned pre-production environment.

    Suppose I'm onboard with happens like that and I want to automate the creation of these reservoirs of pre-production. Right now they are built manually to the new servers, and then the refresh script.

    Refresh the script:

    (A) pre-production shutdown server

    (B) remove the snapshot on the production server (committing the latest changes to the base vmdk)

    (C) create new snapshot to the production server (freeze the base vmdk)

    (D) Power Server pre-production (with validated changes)


    This script is scheduled every night to start the next day with a cool environment. Another advantage of this approach that is not persistent, it is that a simple reboot brings the pre-production back to a clean version (if tests are not doing well).

    Issues related to the:

    Is there a way to clone a virtual machine without the disc? This would make the easy creation of new servers in pre-production. Clone, log drives, change the port group. Fact.

    Is there a better way to achieve that kind of result without this kind of 'false linked clones?

    The following seems to work for me. A few notes:

    • The virtual machine is cloned without any of its VMDK
    • The new virtual machine is created on the same node of ESXi and store data as a source of VM (since you don't seem to have special requirements in this aspect)
    • This script does not work for a virtual computer with RDM disks

    $vmName = "sourceVM".

    $vmClone = "cloneVM".

    $folderName = "MyBlueFolder".

    $vm = get-VM-name $vmName

    $folder = get-file-name $folderName

    $spec = new-Object - TypeName VMware.Vim.VirtualMachineCloneSpec

    $spec. Location = New-Object - TypeName VMware.Vim.VirtualMachineRelocateSpec

    $spec. Location.Datastore = $vm. ExtensionData.Datastore [0]

    $spec. Location.Host = $vm. ExtensionData.Runtime.Host

    $spec. Config = New-Object - TypeName VMware.Vim.VirtualMachineConfigSpec

    Get-disk hard - VM $vm | %{

    $dev = new-Object - TypeName VMware.Vim.VirtualDeviceConfigSpec

    $dev. Device = $_. ExtensionData

    $dev. Operation = [VMware.Vim.VirtualDeviceConfigSpecOperation]: remove

    $dev. FileOperation = [VMware.Vim.VirtualDeviceConfigSpecFileOperation]: destroy

    $Spec.Config.DeviceChange += $dev

    }

    $vm. ExtensionData.CloneVM_Task ($folder. ExtensionData.MoRef, $vmClone, $spec)

  • View production environment

    IM currently only single local mode only viewplanner workloads running but looking at several courses of vm. Someone had problems with the viewplanner agent in a production environment? Already, we have an existing mode of production environment and won't cause problems.

    We are not aware of any problems so far and there were several virtual machines 100 + run without any problem. Can you PM me your email address and we cam discuss your use case in further detail.

  • addition of virtual machine / Server esx for production environment

    Hello

    How can we add virtual machine or esx server for production environment?

    In general... As his "simple terms?

    Install ESXi host

    Install, run and connect to the host via the gateway client installed from the host on an external workstation

    Then

    OR THE OTHER

    Install and run the converter on each physical computer that you want to become a virtual machine

    Once finished, turn off power to virtual and physical.

    OR

    Create a virtual machine and install the o/s CD drive.

    What you want is way off the coast without 1 million questions about your installation.

  • Isolate the production environment servers in a test environment

    I would like to create a clone of my production SQL and Sharepoint server environment and isolate the servers from the rest of the environment. What I want to do is to create a new volume on my SAN and clone the two servers to it. After that, I want to always allow access to a consultant in order to access servers remotely while not allowing the rest of the production environment to see the servers. Is there an easy way to configure this?

    You can work with NAT.

    Add a virtual machine acting as a NAT and gateway in this "isolated" network

    Or, simpler, add a server or a client with a dual NIC, an isolated network and the other in the local network.

    André

  • How to use the command import on the production environment?

    Hi gurus of the OFA.

    I want to know about the production environment OAF and development environment, the differences between them and how to use the command import on the production environment?



    Concerning

    Ajay Sharma
  • How to deploy my portal to the production environment

    Hi all

    I use the ASDK developed an access portal, my question is how to deploy my portal to the production environment? You must also install the ASDK in a production environment? Or just install the package of execution?

    Thank you
    Alan.H

    Hello Alan,.

    Is this an application ASDK 10 g or 11g? In both cases, the answer is really the same thing: do not install the ASDK in the production environment, but for 11g it's much easier to do.

    Kind regards
    Colin

  • Canonical URL for the product?

    What is the best way to manage the canonical URL for the products?

    The easiest way would be to use a template to be applied to these pages, but what module/tags should I use for a template that renders the URL?

    Thank you!

    Lynda

    Wait, as BC is working on the feature and hopefully coming out soon.

    If you can't wait then use custom field and the canonical tag in the presentation of the great product and manually paste the url in the url you want as primary.

Maybe you are looking for