Ajax Region Pull and checksum

I have the page, which consists the report, which has to be pulled using ajax. The problem is this page has the checksum enabled.
I've created the start and end of the report tags on this page (<!--REPORT_START-->,<!--REPORT_END-->).
I was able to generate the checksum but not sure how I can add it to the request for the report.
Here's the extract of the javascript code for the page:
var checksum=generate_checksum(url_params);
alert(checksum) // this part works fine
+//start ajax call+
var ajaxReq = new htmldb_Get  (null,&APP_ID., null,2025);
ajaxReq.add('P2025_LIST_ID',list_id);
+...+
report_body=ajaxReq.get(null,'<!--REPORT_START-->','<!--REPORT_END-->');
The report body is returned only if checksum is removed.
BTW I thought I can stick it in the querystring parameter number 7 in htmldb_get but it does not work.
Have anybody done that ?
Thanks for your help
Mikhail

Mikhail,
I am concerned about your approach, because if you have a 'generate_checksum' JavaScript function that provides a way for you to generate a valid checksum on the client-side, what's to stop a hacker from calling that same function and easily circumventing the SSP protection on the target page?
Have you thought of either un-restricting the target page and adding some logic to your report query to try and protect the values (eg only show certain rows for certain users, etc), or if you really want to keep the protection level on this report page, switching to a simple full page submit?
Also, if you're on APEX 4.0, have you looked at using the 'Refresh' dynamic action? This has the same checksum restriction, but would be an easier and more supported way of approaching this in a partial page refresh way. Please see here for more geenral info. on how to do that:
http://anthonyrayner.blogspot.com/2010/07/report-filtering-with-apex-40-dynamic.html
Hope that helps.
Regards,
Anthony.

Similar Messages

  • Ajax Region Pull - Javascript errors

    Hi All,
    I have tried implementing Carl Backstrom's excellent example Ajax region pull.... http://htmldb.oracle.com/pls/otn/f?p=11933:48:2576101578276736 and have been unable to get it to work. I have gone through it step by step but i still get a Javascript error relating to the function dhtml_GetReport(pThis). The error is "Object Expected on line 13" => var l_Val = html_SelectValue(pThis);
    I have also included the files htmldb_html_elements.js and htmldb_get.js just in case you were wondering. We are using HTMLDB 1.6.1.00.02 if that could be the issue here.
    Anyone come across this before?
    Thanks.

    Hello,
    All those examples have been built for 2.0 and above.
    Carl

  • AJAX region pull

    I am using ajax to display a region from another page. This region has 2 text fields and a button that when pressed branches to another page. When I input the data and click the button I get an error:
    Error Item ID (10060522396890067) is not an item defined on the current page.
    Any suggestions?

    Hello Stew,
    As I suspected, your problem (and the others who started this thread) has nothing to do with the browser you are using, but in the way you are using the technique described by Carl, and was (of course) spotted correctly by Scott.
    In my answer, I’m also referencing your post in here - Re: Partial refreshing of pages in 2.0 ?
    >> I've looked at the source that's generated by my page and don't find an extraneous <form> tag
    Carl didn’t mean the <form> tag itself but to form input components in general, like items. In your case, we are talking about ‘P20_CUST_ID’, which you defined as a hidden item on page 20. Although hidden, this item is being rendered on page 20, and is included in the ‘box’ you are clipping from this page. While submitting page 2 (apply changes) the APEX engine finds on page 2 and item which not belong to this page, so it issue an error message.
    In your specific case, where the item – P20_CUST_ID – is a hidden one, the solution is very simple. Just set the condition of the item to ‘never’. That will prevent it from being rendered on page 20, so it will not be copied to page 2. I did that on your demo application, and now it seems to work just fine.
    In general, if the item you are using in the remote page must be a regular item (and not a hidden one) you need to use Scott suggestion, and put it in a region that you don’t clip as part of your AJAX process.
    Regards,
    Arie.

  • Ajax region pull bug?

    Hi,
    I have a page with two dynamic PL/SQL regions.
    I want to refresh the second one without submit my page like the following example:
    http://apex.oracle.com/pls/otn/f?p=11933:48:4181203731698424
    here is the main of the example code.
    var get = new htmldb_Get(null,$x('pFlowId').value,null,47);
    gReturn = get.get(null,'<htmldb:BOX_BODY>','</htmldb:BOX_BODY>');
    $x('ReportDrop').innerHTML = gReturn;
    The problem is that if I use such code to retreive a dynamic pl/sql region on the SAME page (i.e. 47) gReturn gets the value *','* (?!?!?)
    If I copy my dynamic PL/SQL region to another page it works fine.
    Is it an APEX bug?
    I expected that I can use AJAX refresh for a region on the same page and I don't want to replicate it.
    Thank you very much.
    Davide

    Davide,
    Interesting problem. One of the main reasons to use Ajax is to avoid a full page refresh because of all of the content that would need to be processed on the server side. If you didn't replicate the region alone on another page then you would not save any server side processing.
    As for the bug, have you used Firebug to see exactly what the Ajax call is returning?
    Regards,
    Dan
    http://danielmcghan.us
    http://www.skillbuilders.com
    You can reward this reply by marking it as either Helpful or Correct ;-)

  • Ajax Report Pull APEX_ITEM.DATE_POPUP  issue

    Hi all,
    I am trying to use something similar to Carl's Ajax Region Pull
    http://htmldb.oracle.com/pls/otn/f?p=11933:48:1222899842354681::NO:::
    So I have 2 pages. My LOV on Page 4 has an onchange event to trigger an Ajax call to page 5 which then displays the results in a region on Page 4.
    Now I am using apex_item calls to allow entry into the report on page 5. Problem is, when I have a date entry item where I have to use apex_item.date_popup then I get a javascript error similar to "genCalf01_0 is not defined" when I click on the date icon to popup the calendar.
    On my instance at work this error is only with the second date field but the first is fine. However on apex.oracle.com, both date icons trigger the problem.
    Any ideas? I have put a sample on http://apex.oracle.com/pls/otn/f?p=38748:4:2006073124664781:::::
    workspace: abots
    username: test
    password: apex_test.
    Cheers
    Kofi

    Hello,
    Using the built in form items pulled from ajax can cause alot of problems and is discouraged. In most cases when you pull a form item from one page into another page it will break your page when you try and submit it.
    Now with the date pickers there is an even bigger issue because there is also embedded individual javascript's associated with each datepicker and when you pull them into the page the page DOM will not pick them up.
    Regards,
    Carl
    blog : http://carlback.blogspot.com/
    apex examples : http://apex.oracle.com/pls/otn/f?p=11933:5

  • Cross browser issue using ajax report pull

    Hi,
    I have an application working using ajax report pull.
    Entire application is based on ajax and its currently released.
    Its performance is good. It works fine with mozilla but in ie,
    links and buttons are not working.
    my code is as follows:
    var container = document.getElementById("divlayer");
         container.innerHTML="";
         var l_Val = document.getElementById('P15_ID').value;
         var l_Val1 = document.getElementById('P15_REGION').value;
         var l_Val2 = document.getElementById('P15_COUNTRY').value;
    var get = new htmldb_Get(null,html_GetElement('pFlowId').value,null,10);
         get.add('P15_GSI_PARTY_ID',l_Val);
         get.add('P10_ID',l_Val);
         get.add('P10_REGION',l_Val1);
         get.add('P10_COUNTRY',l_Val2);
         get.add('P10_ROWS',l_Val3);
         get.add('P15_REGION',l_Val1);
         get.add('P15_COUNTRY',l_Val2);
         get.add('P15_ROWS',l_Val3);
         gReturn = get.get(null,'<htmldb:BOX_BODY>','</htmldb:BOX_BODY>');
         get = null;
    document.getElementById("divlayer").style.visibility='visible';
    document.getElementById("divlayer").style.display='block';
    var elem = document.createElement('div');
         elem.id='d1';
    elem.innerHTML=gReturn;
         container.appendChild(elem);
    The links with doSubmit is not submitting to the same page in ie.
    Please help me.
    Thanks,
    Niveditha

    Hello Niveditha,
    There're some differences in browsers... so yes it's possible that it doesn't work with the same code in another browser. The good news is that most of time there're workaround.
    When I look at your code, you could already change document.getElementById() by $x(), which is doing the same, but comes from the APEX framework.
    Do you have an idea where it fails in IE? Are you using the Developer Toolbar? Maybe that gives you more insights. You could also put some alert('hello 1'); in your code to see what's happening and how far it comes.
    If you put it on apex.oracle.com we can have a look into more detail.
    Dimitri
    -- http://dgielis.blogspot.com
    -- http://apex-evangelists.com

  • Region Pull with Region Tabs

    Hi,
    has anybody tried to have region tabs into an region pulled from other page (
    both examples from Carl (http://htmldb.oracle.com/pls/otn/f?p=11933:48 and http://htmldb.oracle.com/pls/otn/f?p=11933:55)
    I have a page (Page1) from where I call the "Region Pull" that's working fine. In the pulled page (Page2) I have created the "Region Tab". the Javascript I have added in Page1. The tabs are shown, but when I click on another one than default, nothing happens, so no other region is shown. After having a look in the javascript code, I think it is a problem of the call of the new tab region:
    function doTab(pThis){
         var lTab = html_GetElement(pThis);
         set_Some_Item('P2_ACTIVE_PANE',lTab.id);
         var lContent = lTab.id + '_content';
         html_TabClick(lTab,lContent);
    var lContent = regionX_content ... is it possible that he couldn't find this region???
    thanks for any suggestions and help
    chrissy

    Hi
    Does checking the box marked Show All Regions, & then looking for English (Japanese), help at all? May be able to reinstall it by running Optional Installs from installer DVD?
    Could always use Pacifist to extract it from Install DVD - http://www.charlessoft.com/
    Steve

  • Dynamic region bugs and bad documentation

    I cannot get the second taskflow to behave correctly in a dynamic region.
    Here's my scenario:
    In the pursuit of resusablilty, I have two taskflows that are coming from ADF Library Jars into a master application.
    Both taskflows have their own associated application modules, which appear as data controls in the master project.
    Following the instructions in the Fusion Developers guide, I create a dynamic region and dynamic links.
    After swapping to the second task flow, when I click on a different table, I get an error that a target is unreachable:
    Target Unreachable, 'RoleId' returned null
    For more information, please see the server's error log for an entry
    beginning with: Server Exception during PPR, #1{code}
    I posted the problem originally under this thread: [dynamic region errors
    and got a response that I didn't understand -- both taskflows have data-control-scope = shared.
    In contrast to the problem using a dynamic region, if I build a different page in the master application and use each taskflow as *separate* regions (via a tabbed panel), they work fine.
    So it doesn't seem there is anything wrong with the taskflows per se, but rather something in the dynamic region switching mechanism that is broken.
    I'd appreciate hearing from anyone who has had similar problems or anyone who knows of a solution.
    In exasperation, lili5058
    UPDATE
    Sorry for the earlier rant. I figured out the reason for the odd behavior and it has to do with the code generated by the wizard. This code isn't so much wrong as it is short-sighted. Here's the code generated for the managed bean by the wizards for creating a dynamic region and dynamic link that is put into *backingBeanScope*:
    {code:java}package view.beans;
    public class DynamicRegionBean {
    private String taskFlowId = "/WEB-INF/taskflow1.xml#first-taskflow";
    public DynamicRegionBean() {
    public TaskFlowId getDynamicTaskFlowId() {
    return TaskFlowId.parse(taskFlowId);
    public String firstTaskflowtaskflow() {
    taskFlowId = "/WEB-INF/taskflow1.xml#first-taskflow
    return null;
    public String secondTaskflowtaskflow() {
    taskFlowId = "/WEB-INF/taskflow2.xml#second-taskflow";
    return null;
    }{code}
    The user is taken to the second task flow by clicking the link that executes the secondTaskflowtaskflow() handler, however, any subsequent requests take the user back to the first taskflow, i.e., the one assigned to the private instance variable, since that's how the wizard wrote the code. This explains why the table on the second taskflow displayed "Fetching Data . . .". The table's content delivery was set to lazy, so when the browser issued the AJAX request to get the data for the table, the task flow switched back to the first one and thus making the data unavailable. Changing the the content delivery attribute value to immediate, brings up the data initially, but any subsequent work on that taskflow routed the user right back to the first taskflow.
    I ended up fixing the problem by adding the TaskFlowId (data type) to the pageFlowScope map, so it would be remembered across requests until the user deliberately requests a different taskflow.
    Edited by: lili5058 on Feb 7, 2009 12:56 PM
    Edited by: lili5058 on Feb 7, 2009 5:06 PM                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   

    Hi,
    chances are you are hitting a bug. But this is hard to say from here. If you want, we can further track the issue down. I suggest you exclude the use of ADF libraries and verify that the scenario works if the two taskflows work in the mentioned scenario of they are both defined in the project itself. If this works then it seems like a bug that should be filed. Can you verify this ?
    Frank

  • How do I get the iTunes store to pull and use updated info from Gracenote?

    I'm helping a music group fix their CD information, which was incorrect in the Gracenote database. Gracenote made the corrections, but the iTunes store is not reflecting the changes. I verified the changes were made by inserting the CD on a PC, and, through the iTunes client, asking it to pull the track info from Gracenote. The info is correct.
    However, if you use the iTunes client to go to the store, the info in the store does not match what was pulled when sticking the CD in the drive and querying Gracenote. Also, if you go to the CD URL via a web browser to preview or purchase a digital download, the iTunes store web site is still showing the wrong information.
    How do I get the iTunes store (that is, Apple's server, not the iTunes client) to pull and use updated (correct) CD information from Gracenote?

    Geek Girl,
    The official Content Provider relationship with the Store depends how it was set up, and may be the group or their agent or a 3rd party such as TuneCore.  They can go back through the same official channel that put the tracks in the Store in the first place.
    Or, if it is simply an error, as opposed to an official change by the Artist, you can try the Feedback page:
    http://www.apple.com/feedback/itunesapp.html

  • Currency in report taken from regional setting and not infocube

    Dear All,
    I am facing very strange issue. I am using BEx analyzer 7.0
    I executed a report in Windows 2000, Excel 2003. The values are displayed correctly with currency which is in cube irrespective of the currency set in regional option in control panel.
    We are doing testing on windows vista and excel 2007 as we will upgrade to SAP GUI 7.10 and windows vista. I executed the report and the result values are matching but the currency is differant. The currency is taken from the regional settings in control panel. If I go to regional setting and change the currency, the report which is open in BEx analyzer changes the currency.
    We are facing this strange issue for only queries on 1 infocube. Other queries on another infocubes/multicubes are working fine.
    Has anyone faced the same issue. Please provide some pointers/solutions for above issue.
    Regards,
    Niraj

    Hi Shalu
    The Library 0FL has 4 currencies... i.e.
    HSL  - Local Currency  
    TSL   - Transaction Curre
    KSL  - Second Currency 
    OSL  - Third Currency  
    Go to GRR2 (Report form of your report), and double click on any column... You choose Key Figures in the Columns in a areport painter report... there you would have chosen any one of these currencies...
    Right click on the column and Copy it and paste it... Now change the Key Figure of the copied column to the one you desire...
    This should give you values in both currency...
    To identify which form you have used in GRR2 - Execute your report and go to Extras Menu > Technical Information.. In the pop up window that opens, double click on field "Report".
    Regards
    Ajay M

  • How to modify regional settings and keep Acrobat 9.4.1 working?

    When I modify the regional settings on my W7 PC (i.e. switching the decimal symbol and digit grouping symbol from dot to comma and vice-versa), I cannot print to Adobe PDF Printer nor can I convert Office documents to PDF files anymore. It seem like the joboptions files were getting corrupted (I can see read errors).
    Can anyone advise on how to modify the regional settings and keep Acrobat 9.4.1 Pro working properly? Do I have to adopt the joboptions files (and if yes, how?)?
    Thank you for your advice!

    The defaults for three are blank entries. That is there are no defaults, The only way to get those back to being blank would be to delete your preferences file ( Home->Library->Preferences->com.apple.Aperture,plist ) and possibly the files in *Home->Library->Program Support->Aperture* (but I don't think you would need to do these, not sure.)
    However before you do this you should know there is no drawback to having these entries filled in. Aperture would only attempt to use them if you actually selected them while using Aperture. It won't be looking for them on startup. And if the programs pointed to by these entries no longer exist on your system Aperture won't even fill in the names in the menu items where these are pointed to ( *Photos->Edit with* for example)

  • AJAX producer/consumer and JAVA producer/consumer  in same project

    I've already successfully integrated and customized the code for both an AJAX and JAVA producer/consumer client in JMS (using ActiveMQ as the JMS broker and Tomcat as the webapp container). While both have been working well in separate projects, unfortunately, I'm having a bit of trouble trying to integrate them for the purpose of running an AJAX message listener and JAVA message listener in the same project.
    What I'm trying to do is have JAVA act as the failover for when the AJAX JMS consumer is not listening (i.e. when the browser is closed). When a browser client opens, the (constantly running) JAVA client can ignore the messages... but... when no browser client is initialized, the JAVA client should respond to the messages on behalf of the AJAX client.
    I've tried using a ServletContextListener pattern, which I was hoping would "automagically" launch the JAVA listener via its main method, whenever the Servlet gets initialized (i.e. it would auto-start when Tomcat gets restarted, or, anytime the Servlet gets redeployed) but it seems Tomcat is not thread-safe and this might be causing some problems.
    In any case, I can't seem to get the JAVA client to reliably start running and stay running for the lifetime of my AJAX client (webapp .war), and without including them in the same project and same J2EE container sharing the same ServletContext, I don't know how its possible to ensure they are running and starting and stopping at the same time.
    Is there perhaps a better way to accomplish this?
    Edited by: bcmoney on May 17, 2010 1:25 PM

    I've already successfully integrated and customized the code for both an AJAX and JAVA producer/consumer client in JMS (using ActiveMQ as the JMS broker and Tomcat as the webapp container). While both have been working well in separate projects, unfortunately, I'm having a bit of trouble trying to integrate them for the purpose of running an AJAX message listener and JAVA message listener in the same project.
    What I'm trying to do is have JAVA act as the failover for when the AJAX JMS consumer is not listening (i.e. when the browser is closed). When a browser client opens, the (constantly running) JAVA client can ignore the messages... but... when no browser client is initialized, the JAVA client should respond to the messages on behalf of the AJAX client.
    I've tried using a ServletContextListener pattern, which I was hoping would "automagically" launch the JAVA listener via its main method, whenever the Servlet gets initialized (i.e. it would auto-start when Tomcat gets restarted, or, anytime the Servlet gets redeployed) but it seems Tomcat is not thread-safe and this might be causing some problems.
    In any case, I can't seem to get the JAVA client to reliably start running and stay running for the lifetime of my AJAX client (webapp .war), and without including them in the same project and same J2EE container sharing the same ServletContext, I don't know how its possible to ensure they are running and starting and stopping at the same time.
    Is there perhaps a better way to accomplish this?
    Edited by: bcmoney on May 17, 2010 1:25 PM

  • Substitution For Region, Button and Tab

    We are building a general security table with groups of users(LDAP, Banner etc.) and what they can access in APEX. The table will be accessed from a custom function in Authorization schemes in any application or workspace in order to control security all in one location. I want to create 5 generic authorization schemes-one for applications, pages, regions, tabs and buttons that call this function with the appropriate parameters. This is easy in the case of the application and page eg. Security_Function(app_id=>:APP_ID, app_user=>:APP_USER , app_object_type=>='Page', app_object=>:APP_PAGE_ID).
    If the authorization scheme is applied to a region, button or tab, is there a way to reference dynamically the current region, button or tab ( in the same way it can be done for the page) in order to make the authorization scheme dynamic and generic?
    Karen

    Hi,
    As I understand it, that's not yet available - see: Determine current renderd item, region,... for use in authorization schema
    Andy

  • EDI for cross docking process (pull and push)

    We need to send in the EDI process, the allocation by store information to the vendor using pull and push process.
    When we have pull process, we can do some enchacement in ORDERS IDOC, by the push process, somebody knows what IDOC we can use to send this information to vendor?
    Regards,
    Laura Yunaka

    Hello,
    Order information is sent to vendors using IDOC type ORDERS05 with message type ORDERS/ORDCHG (Create/Change).
    Thanks,
    Venu

  • Region Attributes and Region Header on Tab Template. Apex 5

    All,
    In order to have my pages not scroll, but instead have a region scroll I would do an overflow on the region header and attributes in apex 4.
    When using this same method on a tab template, all of the reports within the tab templates get shown one after another.
    eg;
    region attribute......style="width:350px;height:758px;"
    region header..... <div style="overflow: auto; width: 350; height: 700px;">
    it does make the region scrollable, but the tabs stop working and instead are displayed one after another.
    Does anyone know of a fix / workaround?

    Hi gianpagi,
    gianpagi wrote:
    i would like to know how to have an horizontal scrollbar for an interactive report (5.0) after making a pivot from the user interface; i have a lot of columns and without the pivot the horizontal scrollbar appears . After it doesn't appear.
    I tried with the Region Header <div style="overflow:auto;"> and Region Footer </div>  but without success.
         Please mention the theme and template you are using for the Interactive Report.
         Can you re-produce the issue on apex.oracle.com and share the workspace credentials, so that can have closer look at the issue?
    Regards,
    Kiran

Maybe you are looking for

  • Query Desing issue

    Hi, We have requirment for the reporting on Cube.As per the requirment i am able to find all the fields in the cube except one keyfigure. For geting that key figure in report ,i would like to enhance the 0MAT_SALES characterstics with new key figure,

  • Using Struts with Oracle

    Hi I need to use the struts framework with oracle (10g express edition), I am using eclipse IDE. anyone please help me. I dont know how to set these up for use..

  • Min-Max Planning concept

    Hi Neils, Can you please throw a light on --> Min-Max Planning Concept and what is the formula for Min-Max regds MRR

  • Adding Vista Ultimate Computer to BEFW11S4 network with Windows ME and XP??

    Is it possible to add a Vista Ultimate computer to a wireless network using a BEFW11S4 Version 4 running firmware version 1.50.14? My existing network consists of a Dell desktop on Win/ME which connects wired to the router and 2 laptops on Windows XP

  • LabView 5.1 and MS Access

    Is there a simple way to communicate with MS Access Database under Labview. I tried sample code found in the package but DDE is note very good and require Access to run behind. I also tried putting some DAO object (ADO+DBGRID using activeX object) bu