Violation of page Protection

Hello

We have just upgraded to 4.2.4 (running with Oracle 10 g) and were testing our applications when we encountered a problem.  We have 1 single application with mostly static links on different tabs.  Among the tabs/pages (let's call this Page 1) contains an HTML region that displays an IFRAME which incorporates the 2 Page report.  Page 2 is a model of Popup and also contains an IFRAME within an HTML region which incorporates the Page 3.  Each IFRAME displays a report.  When a user selects a value in the report to Page 1, the IFRAME to the Page 2 is displayed with documents of the selected record.  If the user changes their selection on Page 1, the values in the IFRAME changes.  Page 3 works in the same way... folders sub-sub showing what is selected in the IFRAME to the Page 2.

I can navigate through all the tabs, but after that I selected the tab for Page 1, I cannot access any other pages.  Basically, I can accomplish all submit actions once the 1A Page was loaded.  If I try to leave the Page 1, I get the following error message:

«Contact your administering the application.»  Violation of page protection: this can be caused by sending a page that had not yet finished loading or manually editing the protected page elements.  For additional assistance, please contact the Administration request. »

Loading, the page is definitely over... I waited another minute.  I read a few threads talking about security settings changed in version 4.1.1 APEX and how these errors might be linked to the HIDDEN items are being protected.  I changed ALL the hidden items in the application of ' protected value = no. "and I still get the error.  I changed the value of the browser Cache for all 3 pages (Page 1, Page 2 and Page 3) off and I changed the values of deep links for all 3 pages (I tried Enabled and Disabled) and I still get the error message.

I have no problems on another page... I am able to add/remove users on the access control page that performs a send action.  After I navigate to Page 1 the only way I am able to access one of the other pages is to close and run the application again.

We don't have this problem on our previous version which was 4.0.2.  I think that the problem is related to the IFRAMES, but I can't identify what is the problem.

Any ideas on what could be the problem?  Please let me know if you need more information.

Thank you

Tara

Tara,.

I changed the closing automatic elements IFRAME to get a match close the tag, and he seems to have made a difference.

TO

I don't know why, but perhaps the process that computes the checksum of page is not recognizing elements iframe properly which results in an incorrect checksum.

-Jeff

Tags: Database

Similar Questions

  • Violation of page protection - error get by using the custom plugin

    https://Apex.Oracle.com/pls/Apex/f?p=63937:1:

    The app link.

    Identification information

    -TINO

    [email protected]

    -test123

    When I try to send a page using the normal text field, he's fine. But when I use my custom plugin it throws error PPV.

    You can see the plugin code in the shared components of the application.

    Application is called theme MDL.


    There also may be problems with my page template but I doubt since the ordinary questions works very well.


    I developed this on 4.2.6.

    Incredible.
    The problem is that the plugin was wrapped with

    As soon as I took it, it could submit its value.
    It's funny how I had no idea how fix it, but as soon as I saw you talking about form I knew what to look for.

    It would be cool to know why this happens.

    Thank you!

  • APEX 4.1.1.00.23 page protection violation

    We have the same problem that is explained in the thread - violation of page protection when the page loads and is presented partially

    After sending a page, we set the value of the 'J' on a hidden item. The element with the value 'J' activate an html region. In the area of the html we use two javascript calsl-> a call send a request to your web server to generate a pdf and set the value of the element hidden in "N"; the second javascript call is "doSubmit();
    The last show to call javascript error-> violation of Page protection...
    At the APEX 4.1 we do not have these problems.

    I created an application with you are the apex page under apex.oracle.com:

    workspace: rgz
    user: demo
    PWD: demo

    How can I solve the problem?
    Thank you

    Hi Robert,.

    the problem is the JavaScript code in "do some work". If fires too early and tries to send the page before the page is completely loaded. Some required internal page elements are not part of the subject page, that's why you get the error.

    I changed your code to "Header and footer" area of

    doSubmit();
    

    TO

    $(document).ready( function() {
       doSubmit(); });
    

    (can also be simplified to)

    $(document).ready( doSubmit );
    

    to delay the execution of the shipment until the page is loaded. If possible, you should try to use a dynamic action with the event 'Page loading' or to put your JS code in the page attribute 'And Global Variable function declaration' and 'run when the Page loads", because that will make your page more transparent that JS code is executed, and it is not hidden somewhere within a foot of the region.

    BTW, also take a look at the help

    $s("P3_SHOW_JN", "N");
    

    Instead of

    html_GetElement('P3_SHOW_JN').value = 'N';
    

    because APEX JavaScript API is more about the type of the page element to the right definition of the "value" attribute

    Concerning
    Patrick
    -----------
    My Blog: http://www.inside-oracle-apex.com
    APEX Plug-Ins: http://apex.oracle.com/plugins
    Twitter: http://www.twitter.com/patrickwolf

    Published by: Patrick Wolf on April 30, 2012 10:14

  • Error Page protection violation in APEX 4.2.2 - Login Page

    Hi all

    I have an internal application (application extremely personalized ;-)) that uses dynamic action to connect to the apex without loading the login page.

    However after ungrading to 3.2.1 I found out how that this 'approach' is now met with the famous "Error Page Protection".

    I disabled all the protections of session state and everything. I have a check_sum on the page.

    What I need is to completely disable these controls. This SUMMIT only for a small group working within an intranet, but we want to make it accessible to other employees?

    I read about the error and nothing seems to relate to my question. The error is on the login page. This happens when I submit a full url to the login page of my application.

    I understand that this is to protect applications, but I insist own hacking my own APEX application. I don't want to manipulate the elements on my page!

    Can someone advise how to CANCEL this protective function.

    Thanks in advance for your suggestions.

    Jan S,

    Hi Jan,

    If you create a request of wwv_flow.accept of the desktop application on page 101 of your APEX application. As you probably know, passing the credentials in the URL is not safe, but let's ignore that for now, because the point is to hack your own app, as you mentioned above :-) How about this:

    1 generate a normal f? p application, e.g., f? p = 12345:101:0:P101_USERNAME, P101_PASSWORD:JanS, JanSPassword

    2. on your login page, add a front page header junction accept, with the goal of page 101 and request LOGIN

    3. Add a condition to this branch, so APEX uses only if P101_PASSWORD is not null

    Kind regards
    Christian

  • Problem with application BRANCH_TO_PAGE_ACCEPT when access page protection is enabled

    Hello

    We have an application that uses the application BRANCH_TO_PAGE_ACCEPT to send the called page.  The used redirect URL is:

    f? p = APP_ID:880:SESSION:BRANCH_TO_PAGE_ACCEPT | DO_FIND::880

    The security setting for access on the called page Protection has recently been upgrade 'Arguments must have checksum.  The URL now includes the required checksum, but now we are getting the following error:

    Try to save the point in session state during accepts the treatment, the resident protection or is not a form element that can be published.

    A demo of this problem can be found here:

    http://Apex.Oracle.com/pls/Apex/f?p=72031:1

    At the above

    -a button on page 1 that redirects to the page 2 and includes the request BRANCH_TO_PAGE_ACCEPT

    -a branch on page 2 for redirect to page 3

    -Page Access Protection set to 'Arguments must have checksum' on three pages.

    Is this a bug with the BRANCH_TO_PAGE_ACCEPT application, or I missed something.

    See you soon,.

    Andy.

    Hi Andy,.

    BRANCH_TO_PAGE_ACCEPT can not pass applications or elements of pages protected for security reasons. You get this error because the value of request "DO_FIND". There is only a very special case where this works, is when you spend nothing and accept query empty (i.e. "BRANCH_TO_PAGE_ACCEPT |"). In your first example you should consider another application, for example with before the branches of the header.

    Kind regards

    Christian

  • Violation of State protection session during the creation of master page / retail

    I am trying to create a new master page / detail in Apex 5.0, and at the end of the dialog box, I get this error message:

    Session state protection violation: this can be caused by manually editing the protected page P24_MASTER_PAGE_MODE point. If you don't know what caused this error, contact the administrator of the application for assistance.

    [I am the administrator of the application, and I have not the slightest idea either.]

    The error occurs when I click Next in the dialog Page attributes. The error also occurs in other applications in the same workspace. So I don't think it's important, but I replace the default detail Page number. (The default number of Master Page is grayed out.) In addition, the dialog box layout I had selected... in a table on the same page. I've also specified no master navigation and no reports of master.

    Following archived discussion of v4.1.1, Session State protection violation, I modified a diagnostic query and run the following in my diagram:


    Select item_id, nom_element page_id, region of apex_application_page_items where nom_element = ' P24_MASTER_PAGE_MODE'


    I'm not abreast of any application in my workspace with a Page 24 and sure enough, this query returns no data found. Please take note of this before suggesting to change the attributes of the element. I don't know where the item is and not only the database, apparently. Apex seems to think there is - but where?


    Since an earlier discussion which went nowhere, I crushed my most recent request for export file, but that has not solved the problem. I also went into my workspace apex.oracle and created a form master / detail without error.


    Thanks for your help!

    Obfuscation Express.

    Worsening Express.

    Apex, the product you hate to love.

    It turns out that the dialog box create a Master Page / detail has a Mode option of the Page on modal Page attributes page. I'd be willing to bet, this option is not P24_MASTER_PAGE_MODE. (There is also one for the details of page: P24_DETAIL_PAGE_MODE?) But it has the Normal and gray value.

    It is also now a Select list after my dose; I think it was a type item view only before the fix, which only confirms my thought. I was wondering, which could affect, or enable or disable the modification of the attributes of session state for that element. Model and its theme came to mind, and I remember that I had tried to understand something on a model in the last days, had made a change and tried to cancel it.

    To no avail, apparently.

    Thus, a little more explore new territory, trying to find the modified model and could not. But I read that templates are collected into themes, and I found that I could renumber 26 theme in the application (926). Then make a theme create, from the repository, changing from standard to all themes, click theme 26. Then it was switching themes and rematching models and remove the renumbered theme 926.

    Voila! I can now create a master page / detail without report master!

    Thanks for all the help, with particular satisfaction for Pranav.shah, who was on the train right but don't know which track to take.

  • Violation of State protection session error - after upgrade to point 4.1.1

    Hello!

    After the upgrade to demand Express 4.1.1.00.23 we get the following error message when you try to leave a page with elements of readonly:

    Session state protection violation: this can be caused by manually editing the protected page PXX_ITEM_NAME point. If you don't know what caused this error, contact the administrator of the application for assistance.

    Everything works fine in 4.0.2.00.07!

    Session of the element State protection has the value "without restriction".

    Someone now on a solution or possible workarounds?

    BR Paul

    Hi Paul,.

    in fact, it's a bug in the LOV awesome plug-in. In the case of the read-only, it also called

          l_name := apex_plugin.get_input_name_for_page_item(FALSE);
    

    but never use this value that subsequently confuses APEX when the page is sent.

    This statement, I moved to the the if ELSE

       ELSE
          l_name := apex_plugin.get_input_name_for_page_item(FALSE);
          sys.htp.p(
                '<input type="hidden" name="' || l_name || '" id="' || p_item.name || '_HIDDENVALUE" value="' || p_value || '" />' || l_crlf
    

    and now it works.

    I'll let Dan know so that it can release a version update of the plug-in.

    Concerning
    Patrick
    -----------
    My Blog: http://www.inside-oracle-apex.com
    APEX Plug-Ins: http://apex.oracle.com/plugins
    Twitter: http://www.twitter.com/patrickwolf

  • Redirected page 'Protect your kids with parental controls' when you try to sign in to Family Safety

    I'm able to access my security account for the family to manage the accounts of my children.  I keep getting redirected to the page of 'your kids with parental controls Protection. "  What happened, and what should I do about it?

    I've updated the customer on my son's computer.  After that, I was able to log on the website of the parental control without problem.

  • Facebook is blocked... page protection antivirus... takes you to a page where you purchase protection... I have norton already... don't let me use facebook

    Facebook is blocked... page which wants to buy me a virus... says my computer protection is attacked... norton is woking and said everything is fine... but can not use facebook... page continues to block the appp

    update your Norton and a full system scan. The latest version of Norton 2010 version (currently), you have updated free option to that, contact technical support for Symantec and help for the update and also helps it remove malware.
    The support link is:

    http://www.Symantec.com/support/index.jsp

    Also, I recommend you to log on to the suite of site Web and full scan and remove risk: http://onecare.live.com/site/en-us/center/whatsnew.htm

    It's probably a fake anti-virus that try to convince you to buy it.
    If you are using Internet Explorer 8, it should be block but if not, try to go to the security-> SmartScreen filter-> reported as unsafe

  • Pages protected individually password and secure areas

    Hi all

    looking to set up a password protected pages on a site of BC.

    for example, the (client) Site administrator could create a new web application with customer specific content element and then share the article page web app with the client that the password protected page.

    It would be ongoing, with a new customer every time. Ideally, the process should encourage the customer to create an account

    Looking at the areas of security, I couldn't work if that was possible.

    Does anyone know how this could be done in British Colombia?

    Thanks, Kieran.

    If you are on a tight schedule and you don't have the time to play with the API queries or to develop a new application for this purpose I suggest to go with the "manual" way The app has its advantages in the long-term usability, but it requires some knowledge of developer.

    Here are some resources that will help you to choose between the two:

    1 create an application base - build your first application (you need at least a paying site to register as application developer)

    2 create a CRM - Customer contact | Developers of enterprise catalyst

    3. subscribe the customer to a secure area - customers of and secureZones. Developers of enterprise catalyst

    4. create a webapp - Create Web App point | Developers of enterprise catalyst (when you create the item webapp you can also bind it to the CRM contact created above)

    From a complexity point of view this app is not extremely complex given the right forward, that you must implement. Even with all the samples provided, but it will take a certain amount of programming knowledge.

    I hope this helps!

  • How to unlock a page protected for the use of the iPhone?

    I'm reading an ebook for my class. The ebook is password protect. The only problem is that I can't select my cursor into space to type my password. My keyboard does not appear either. Is it possible to unlock a page using the iPhone? @

    Hello

    Acrobat Reader for iOS is not an eBook reader.  It does not support eBooks or PDF documents protected by DRM (Digital Rights Management).

    You try Adobe Digital Editions to read the eBook?

    Adobe Digital Editions

    Unfortunately, Adobe Digital Editions is available only for a Mac/Windows computer or iPad (not iPhone).

    Technical specification | Adobe Digital Editions

    You may be able to find other free eBook reader apps in the Apple App Store.  Sorry for the inconvenience.

  • Bug report - named anchor - SSP page protection

    APEX 4.2.1 https://apex.oracle.com/pls/apex/f?p=57688:14

    The button FOLLOWING a redirect URL to Page 15 using the f? p = rating to scroll the page for an area at the bottom of the page by using a named anchor f? p =... #bottom

    Page 15 has the SSP Access Protection Page attribute to the Arguments must have the checksum, the redirection fails when the link is not the checksum

    The NEXT2 button does the same thing but uses the declarative fields to set the target of button as follows http://screencast.com/t/OOw6Q6C2

    I thought that sticking the named anchor * #r620 * in the field with these values and leaving the field empty page elements will be a problem, but it works very well, APEX generates the checksum in the f? p = URL and finally bugs on the named anchor. Everything as it should be, perfect.

    Now... when I go back to the edit page of button (4000:4314) fields are empty! http://screencast.com/t/lMMmOlF2fYgc I scratch my head of course but the behavior is always the same.

    Export the page shows that the button target attributes are always defined
      p_button_name    => 'NEXT2',
      p_button_action  => 'REDIRECT_PAGE',
      p_button_redirect_url=> 'f?p=&APP_ID.:5:&SESSION.::&DEBUG.:5::#r620',
    but the page Builder does not know how to handle the named anchor so it messes up the display. Of course, the button apply the changes on the complains now that the Page field is now empty, so indeed, the target page of key cannot be changed using the constructor :-(

    Can someone in the team of the APEX please consider what bug and advise if there is a solution? Thank you

    Hi Vikas,

    I found a solution, even if it's a little awkward. You can switch to Classic view and click the "Change all" button. It will show you the URL.

    Value for endangered, anchors # apparently received support in some parts of the manufacturer (for example the branches) in 3.0, but not in the links of the button. I'll file a bug.

    Kind regards
    Christian

  • How to create an entry page protected password for a site of muse?

    I created a site in the Muse and the client wants that it is password protected for the moment... the usual Javascript between the head and body tags does not work.  Any ideas?

    Hello

    Please check previous password protection:

    Can I create a login/password in the Muse for a HTML5 page or two?

    http://forums.Adobe.com/message/4406164

    There are several ways you can perform password protection, but as noted Cristian, there is no native way to do this in the Muse...

    The only way to password protect Muse pages today would be to implement of the secure areas of the coast accommodation of the House. If you host on Adobe Business Catalyst is quite possible, but requires a good knowledge of all BC content management system. You can get a quick idea of what it would take to set up such a secure area in this BC knowledge base article.

    Others have succeeded with services such as AuthPro.com, JavaScript password protection, or to implement protection of password files and folders in the control panel cpanel/control of their web hosting provider. This creates the so-called "http authentication". Here is an article on how to create the .htaccess and .htpasswd files to password protect your pages or directories using basic http authentication: password protect your Pages with htaccess

    Best regards

    Corey

  • How can I create a web page protected password?

    People of good morning and happy 4th. I want to put a list of members on the site of my club, but that only members with a password for access. I asked this question a month ago, but when I tried which was siggested, it doesn't seem to work. Specifically, I went to divahtml, and entered "password" in their search and came up with zero listed. Any help? Thank you.

    > Specifically, I went to divahtml and concluded "password."
    > their research and came up with zero listed. Any help? Thank you.

    It's because you were misled. The function 'password protect 6' DW
    Extension to which referred Murray is valleywebdesigns.com
    rather than divaHTML.com:

    http://valleywebdesigns.com/vwd_passprotect6.asp

    I'm happy to help if you have trouble.

    --

    E. Michael Brandt

    www.divaHTML.com
    www.divahtml.com/Products/scripts_dreamweaver_extensions.php
    According to the standard scripts and the Dreamweaver Extensions

    www.valleywebdesigns.com/vwd_Vdw.asp
    JustSo PictureWindow
    JustSo PhotoAlbum, and alia

    --

  • Tip to avoid the keys during the page load?

    APEX: Request Express 4.2.6.00.03

    I have two or three "intentionally" pages slow and heavy and end-users fortunately repeatedly press buttons and harmless error messages.

    I would avoid the situation of "remail" and have the "error messages" in trying to repost.

    Good tips to do just that, I hope that Oracle Apex those compatible upwards?

    1.) page attribute, indicates 'small wheel' until this that totally made?

    I would avoid the 3331 error when the page is defined as "NO page to prevent it being published" or avoid the message concerning the violation of page protection then repost is allowed.

    For example show "spinning wheel" or "progress bar" which blocks of keys user?

    2.) or have this 'small wheel' specific to the region, as well as the region's "spinner" up to full charge.

    3.) or how to display the buttons placed on the page after the 'big jobs are done?

    4.) or some other method?

    rgrds Paavo

    Paavo wrote:

    Actually, it's the question - if we leave the decision of development which approach to take:

    -make all the shares of dynamics of buttons and everything for example plsql anonymous to be driven by the dynamic action procedures of instead of making procedures plsql after send this page

    - or do the submission page process (pre era dyn-action method apex) and no dynamic action with plsql code button

    The apex is basically PL/SQL.

    So in order to generate a page of Apex, PL/SQL code should be run. To update a report region, code PL/SQL must be executed. To deal with the elements on a web page to the update/insert/delete of data in the database, PL/SQL code must be executed. Etc.

    This code can be executed in 2 ways.

    Submit the entire page, the flow of the Apex engine. He built a whole new page. This page is sent to the browser to replace the content of the existing window and make any new content in this browser window.

    Use Ajax (Javascript calls) to call the flow of the Apex (aka action/process dynamics) engine. It creates a response (XML, HTML, JSON, etc.). This response is returned, and Javascript is used to treat this response and update objects (e.g. add/update / refresh in the DOM) of the page.

    The two ways are necessary as

    (a) we want to send a new page to the web browser sometimes

    (b) you want to update an existing web page in the web browser by moments

    So it is not a matter of choice in one direction. The two are concerned. Both are needed to create Web 2.0 with rich and interactive interfaces type applications.

    I'm just afraid after accidentally 2 similar submit deals plsql firing - dynamic action and one in present it after Treaty.

    It's a question of developer and development life cycle.

    It comes down to knowledge. Find out what are the differences between the page layouts and dynamic actions. And when to use one that to achieve the goal at hand.

    Lets say that we have to report slow query and report region which takes time to load. But this report is not required for the end user and it could continue by pressing the buttons during the loading of that specific region is always.

    Press the buttons to do what? And why the user would click the buttons when the report data are not yet ready for display?

    The Javascript engine doesn't have a thread model Posix/Windows type.  By default, its calls are non-blocking and use events. See https://developer.mozilla.org/en-US/docs/Web/JavaScript/Guide/EventLoop for more details.

    This isn't exactly a walk in the Park to treatment systems simultaneous good design. And it's true in Javascript too.

Maybe you are looking for