Bug? - Submitting page with html name attribute in content
Hello,
I use a modified version of Task Manager to track tasks in my group at work. I wanted a "non-standard" report to show the users the history of their task at the bottom of a page. Basically I created a PL/SQL function that returns preformatted HTML as I would like it to be displayed in a row of the report. The end result is great - a highly customized report layout with little effort.
The problem is that recently a user copied and pasted some HTML from another web application into the body of a task and saved it. The next time the task was opened my report at the bottom displayed what they had entered previously. However, this time when the user clicked save and submitted the page, he got a page can not be displayed error. After a little digging, I found that the HTML the user had pasted previously contained an HTML element that had a name attribute. When I removed the name attribute, the page submitted fine which leads me to believe that the ApEx engine tried to bind the value of that item with an application item and it choked when no match was found - similar to the way it chokes if you submit a valid item that contains more than 32767 bytes of information.
The fix for my situation is simple. I'll use regular expressions to find these name attributes when saving the page and strip them out. I only bring it up because it could possibly effect other users that might not be able to figure out what the problem is.
Regards,
Dan
http://danielmcghan.us
http://sourceforge.net/projects/tapigen
Dan,
Part of the data stream being emitted to the page is:
< input type="hidden" name="_ctl0:_ctl34:_ctl0:dgCriteria" value="_ctl0:_ctl34:_ctl0:dgCriteria" ...
Since your report does not escape the data, it gets interpreted by the browser as HTML -- a form input item in this case. And yes, modplsql complains because that name cannot be bound to a PL/SQL input parameter in the form-handling procedure.
The correct way to handle this generic problem (second-order cross-site scripting) is to always escape output to the browser unless you control the content from origin to the time it is emitted.
Scott
Similar Messages
-
I am sorry if thie is republished-My first time doing this and I am not sure what goes where and where to hear feedback.
Have published iweb site for five years with no problems and just opened a new site and get -
404: Page not found
This error is generated when there was no web page with the name you specified at the web site.-
Troubleshooting suggestions:
Ensure the page you are linking to exists in the correct folder.
Check your file name for case sensitivity . Index.htm is not the same as index.htm!
Temporarily disable any rewrite rules by renaming your .htaccess file if it exists
is the problem with
iweb or with hosting?
One Apple tech started to fix Iweb and had to end session and the next said problem with hosting at Network Solutions as it published
to local folder. NWS has checked sttting a few times-
Any help would be extremely appreciated as trying to fix this for about five weeks
Thanks VG
<Email Edited by Host>It's a really bad idea to post your email address - it's an invitation to spam - and I've asked the Hosts to remove it. (Even though I've now noticed you mis-spelled it! - anyway, never post your address in a forum.)
You have a site here: http://virginiagordon.com/www.virginiagordon.com/WELCOME.html
If that's not the page you are having trouble with, what is that page's URL? -
Export as Separate PDF Pages with Unique Names
I have an InDesign document that has several pages. I want to export each page as a seperate PDF, but they have to have a unique name that I want to be able to specify.
For example, I want to export page 1 as "calendar page 2014"
Page 2 as "Diary page 2014" etc.
I found some solutions, but they aren't quite what I need:
Export as Seperate pages with image name
This apple script takes the name of the first image on the document and uses that as the name.
However, my document has no images.
Exportools
A paid tool that offers many options for exporting. However, the name has to be based on a pattern, which is no good for me.
I'm hoping that there will be a script that can take the name from a non-printing area/layer. That way, I can just put the desired name on the page and it will export with that name each time.have you looked at the extention Autosplit PRO? This may be what you are looking for. (Although, I don't think this software is compatable with MAC...but if you find out otherwise, please advise!)
good luck.. -
Bug: Application Express - Multiple pages with same name
In my APEX application, I have mulltiple pages with the same name (user requirement). In SQL Developer, it shows the pages with the same name under the MAX Page ID. For instance, I have pages 18, 21 and 22 with the name of "Binder". In SQL Developer I see 3 APEX Page entries for Page 22. And it shows all of the page items for Page 22 in all of the entries.
Thanks,
DanIf I delete extra .ipa files when two different applications have the same name, then I need to keep track of which is the current version of what. "Sudoku 4.ipa" might be the latest version of one program, and "Sudoku 7.ipa" could be the latest version of another.
I wish Apple would create a naming scheme where every application has a unique name, and sequential generations are not used. This would make it much cleaner, and there would be no ambiguity as to either which program is which, or which version is which.
I find the safest way to get rid of all the dups is to just delete them all and re-download the app. The bugs in iTunes still make a mess of things, though. -
How can I send email from an JSP page with HTML format either using jsp
hi,
I have an jsp page with online application form,after compleating the form if i select submit it will send all the compleated data to the mail id we mentioned in the form tag,for this i am using javascript,but instead of receiving the data in the format of strings,my client want to receive the data in the same format as he's filling in the jsp page(html format) through e-mail.any help would be appreciated.the fallowing is the code right now i am using for email application.
<code>
function send()
if(validatePersonalInfo(document.theform))
document.theform.submit()
location.href=location.reload()
function validatePersonalInfo(form)
var tmpStr ="";
if (form.Name.value == "") {
tmpStr = "Name";
document.all.dName.style.visibility="visible";
document.theform.Name.focus();
else{
document.all.dName.style.visibility="hidden";
if (form.SSN.value == "") {
tmpStr = tmpStr + ", Social Security Number";
document.all.dSSN.style.visibility="visible";
if(form.Name.value != "")
{document.theform.SSN.focus();}
else{
document.all.dSSN.style.visibility="hidden";
if (tmpStr == "") {
return true;
} else {
alert("Please Fill the Following Fields: " + tmpStr);
return false;
<FORM NAME="theform" METHOD="post"
ACTION="mailto:[email protected]?subject=Online Application Form for MinorityDealer." ENCTYPE="text/plain">
<TABLE WIDTH="100%" BORDER="0" CELLSPACING="0" CELLPADDING="10" NOF="LY">
<TH>
<P>
<FONT SIZE="3" FACE="Arial,Helvetica,Univers,Zurich BT">Online�Application</font></TH><BR>
</TABLE>
<table width="718" border="1" cellspacing="0" cellpadding="3" bgcolor="#CCCCFF" align="center">
<tr>
<td colspan="2"><font class="captionText">Name*�</font><br><input type="text" size="25" name="Name" class="bodyText">
<div id="dName" name="dName" style="position:absolute;visibility:hidden"><font color="red">Name is Mandatory*</font></div>
</td>
<td colspan="2"><font class="captionText">Social Security Number*�</font><br><input type="text" size="9" name="SSN" class="bodyText">
<div id="dSSN" name="dSSN" style="position:absolute;visibility:hidden"><font color="red">SSN is Mandatory*</font></div></td>
</tr>
<tr>
<td colspan="2"><font class="captionText">Total Personal Assets</font><br><input type="text" size="10" name="TotPersAss3" class="bodyText"></td>
<td colspan="2"><font class="captionText">Total Personal Liabilities & NetWorth</font><br><input type="text" size="10" name="TotPerLiab3" class="bodyText"></td>
</tr>
</tr>
</TABLE>
<IMG Valign="middle" name="imgSubmit" src="images/buttons/Submit.gif" width="66" height="29" border="0" alt="Submit">
</code>Can any one do some help to solve this problem.
Regards. -
Bug submitting form with SpryUtils.submitForm
You can view this problem here:
http://www.bachelorsguide.ca/spry16Ajaxsubmit.html
In the SpryUtils.js file I have changed the final "return:
false;" to "return: true;" as I want the form to submit to the
defined action of the form after doing the ajax submit.
This works in IE... it submits the ajax hit with all the form
variables then submits to the a third party payment page with all
the form variables.
In FireFox it submits the ajax post but doesn't seem to be
passing the form variables with that submit, then it posts the form
to the thrid party and all the form variables are passed for that
hit.
The issue seems to be that the form variables are not
submitted with the Ajax post when using FF but are submitted when
using IE7.
When I leave the final "return: false;" then the Ajax hit
DOES work in FireFox... only when I change it to true; that FireFox
stops working...
Please helpDiana,
The line you gave me was giving me syntax error.
i played with it and found that if I removed all references
to any return that it worked.
So I this right now......
onsubmit="Spry.Utils.submitForm('order_form',
'',{method:'post', url:'modpython/index.py?aoi=true',
async:false});
No returns, and the Utils file has the original code with the
return false at the end.
I don't know what the syntax issue was but it is working in
Safari, IE7 and FF and I want to give you a big kiss!
Ok sorry for being inappropriate but I am extremely happy.
Thanks Diana so much... if you ever have DB issues let me
know. I owe you. -
Identical pages with different names on website
Hi, I've recently put up a new website which completely
replaces the old one. I'm about to delete all the old pages off the
server, but I notice they're still coming up on google. Is it bad
practise to replace the old pages with my new ones, and leave two
copies of the page on the server but with different names? Eg, the
new page about restaurants and entertainment is called
"restaurants_entertainment.html" but the old page is just called
"restaurants.html". So I was thinking I could save my new page as
'restaurants.html' and put it onto the server as well, so that when
users click on the search results they get taken to the new
restaurant page and not the old one. I'm thinking this is not a
good thing to do? just wanting confirmation from the
experts...It's best, whenever possible, to give your new pages the same
filename as
your old pages -- so that basically, you're just replacing
the content on
each page.
If that's not possible, you need to 301 redirect from the old
pages to the
new pages, e.g., redirect from restaurants.html to
restaurants_entertainment.html, so that when people click on
the "old page"
in Google, or from their bookmarks, or in a link on another
site, they will
end up at your new page.
Sonjay
On 11/9/08 7:44 PM, "just_carly" wrote:
> Hi, I've recently put up a new website which completely
replaces the old one.
> I'm about to delete all the old pages off the server,
but I notice they're
> still coming up on google. Is it bad practise to replace
the old pages with
> my
> new ones, and leave two copies of the page on the server
but with different
> names? Eg, the new page about restaurants and
entertainment is called
> "restaurants_entertainment.html" but the old page is
just called
> "restaurants.html". So I was thinking I could save my
new page as
> 'restaurants.html' and put it onto the server as well,
so that when users
> click
> on the search results they get taken to the new
restaurant page and not the
> old
> one. I'm thinking this is not a good thing to do? just
wanting confirmation
> from the experts...
> -
PHP page with HTML and /HTML DOCTYPE ??
The sample forms that come with my formmail script start out
with a <php
and ?> then has embeded php code within the following
<html> - but no
DOCTYPE is specified.
Do I need a doctype in this kind of document?
Where should it to?
Above the initial <php?
After the ?> and before the <html>
OK - dumb question, but Quirks is bad and I don't know the
answer.
Dan H.
(I'm not ready for XHTML yet.)> The HTML 'will' validate but I expect the PHP will cause
the W3C valuator
> to
> hickup.
The W3C validator will never see the PHP since it will have
already been
stripped from the page by the server before uploading the
resulting HTML
page to the validator.
> Is there really any value to ending the document file
name with '.php'
> versus '.html'?
Of course if the page contains PHP then there is (unless you
have your
server set to parse all file extensions). And, in general,
there is a
benefit to naming all pages with *.php extensions in that if
you ever decide
to add PHP scripting to any page in your site, you don't have
to worry
about search engine ramifications when you change that file's
extension.
Good luck Dan!
Murray --- ICQ 71997575
Adobe Community Expert
(If you *MUST* email me, don't LAUGH when you do so!)
==================
http://www.projectseven.com/go
- DW FAQs, Tutorials & Resources
http://www.dwfaq.com - DW FAQs,
Tutorials & Resources
==================
<[email protected]> wrote in message
news:C5B9D4F2.241E4%[email protected]...
> Thank you Dave and Murray,
>
> This discussion is exactly what I needed.
>
> My plan is to produce <HTML> pages (ending in
'.html') that also contain
> PHP
> code ( <php ... ?> ) within the html arguments.
Some of this PHP will
> calculate filenames to link to.
>
> The pages will begin with an 'html 4.0.1 transitional...
Etc.' statement
> followed by the <head> ... etc.
>
> The HTML 'will' validate but I expect the PHP will cause
the W3C valuator
> to
> hickup. I'm guessing that this will NOT put me back into
'quirks mode'.
>
> Is there really any value to ending the document file
name with '.php'
> versus '.html'?
>
> BTW:
> I'll miss this forum. Everything I've learned about
Dreamweaver over the
> last several years and nearly everything I've learned
about coding - I've
> learned from reading posts in this forum by Dave,
Murray, Al, Patty,
> etc...
>
> Most of the information that is valuable to me came from
responses to
> questions asked by others.
>
> It's like the passing of a cherished era - you know -
like the '50s...
>
> I wish you good fortune my friends.
> I urge you to stick together, find an online home, and
let the rest of us
> know where it is so we can come and visit.
>
> Dan H.
>
> PS
> My neighbor says it's President Obama's fault!
> The fellow got elected preaching 'CHANGE'.
> Now everybody's doing it and nobody has any ;^]
> ...................................................
>
> [email protected] wrote:
>> Do I need a doctype in this kind of document?
>
> If it contains HTML, yes.
>
>> After the ?> and before the <html>
>
> Immediately before the opening <html> tag.
>
> ...................................................
> -
While downloading an eBook from internet, I found a book in a folder containing around 123 files, which is equivalent to the number of pages of the book.
My interest is to bring them together in one file so that I can read it at a time. As the interface is not comfortable with html, I also like to convert it into another more suitable file format.Hello djensen1x,
Could you please let me know what version of Acrobat are you using.
Also, tell me your workflow of combining those PDF files?
Please share the screenshot of the error message that you get.
Hope to get your response.
Regards,
Anubha -
Combining PHP Pages With HTML Pages.
Hi,
I started building my site in Dreamweaver CS4 using HTML pages, not knowing until now that any pages with interactivity need to be php.
If my site has seven pages, can four of them be HTML, and the rest PHP? If so, are there any special considerations I have to take into account? Is there anything special that would have to be done at any time during the process of creating the PHP pages, uploading to a web host, etc?
If not, is there a way to convert the HTML pages directly to PHP, or do I have to basically start from scratch?
Thank you.Better to be consistent. You CAN have php, htm, html and shtml pages in your site, but this could cause a server conflict if you accidentally upload more than one index page to the same folder.
Simply rename your ***.htm pages to ***.php (F2).
Remove ***.htm pages from testing and remote servers.
Nancy O.
Alt-Web Design & Publishing
Web | Graphics | Print | Media Specialists
www.alt-web.com/
www.twitter.com/altweb
www.alt-web.blogspot.com -
Retrieve all attributes with specified name attribute
hi all,
how to extract the ancestor attributes with given name which is also an attribute?
for eg.
<country>
<sponsor id="1" level="1" name="john">
<sponsor id="2" level="2" name="mary">
<sponsor id="3" level="3" name="ken">
<sponsor id="4" level="4" name="mick"/>
</sponsor>
</sponsor>
<sponsor id="2" level="2" name="kary"/>
</sponsor>
</country>
(the structure above will be deemed as unlimited nested nodes)
+how to get ancestor given name=mick, will return one way ancestor sponsor named: ken,mary and john?
+the attribute name is the key to travese up or down, how to get the value?
please advise, and thanks
regards,
wesleyi solved one part of my problem.
But, now i have to get all attributes for each users and i couldn't find them. The getattributes method doesn't return anything (i 'd like to retrieve the first name, last name, adress ...)
thanx for help -
Is it possible to export pages with bookmark name?
I have 200 page document and I'd like to export the pages with the bookmark names. Any suggestions?
Well, thanks again! But even if I chose to export using the "current" preset it can not export with keywords from iPhoto.
I have tried to import the iPhoto Library, and then tried to "Relocate Masters..." for both the non-keyworded RAW-files and the iPhoto-imported ones, in order to overwrite the RAW-files without keyword and in this way be able to "Consolidate Masters..." the RAW-files with keywords, but somehow it is not possible.
And I have also tried to export the iPhoto RAW-files in Aperture with IPTC added, but Aperture refuses to reload the IPTC once imported (after I have once again overwrite the files), so I can only update the EXIF using "Update the EXIF from master" and that provides with zero, like you said the keywords are included in the IPTC.
However I succeeded to get the keywords when using "Manage reference file", but this forces me to manually update every image one-by-one if it is not possible to make a good batch for "Manage reference file" that changes the file with filename "A.CR2" from folder "1" into the file named the same "A.CR2" in folder "2", I should be possible I guess since it is the same identical filename and file, but it sounds to me that I better hope that Aperture 3 comes with face recognition. -
I think I finished installing Mountain Lion, and am at the "log in" page with the Mountain Lion icon, but I cannot do any of the functions on screen. That is, I cannot log in, sleep, restart, or shut down. I am running it on an Early 2009 Macbook Pro, which is said to have the capabilities of running Mountain Lion.
BrettGoudy wrote:
...Is there any way I can install a partition that runs snow leopard on my early 2011 MB pro with what I have (new SSD, New RAM, Current version Lion running, no external drive, lack of original snow leopard disks [I lost them ] and the general 10.6.3 snow leopard boot disks)...
As the last post suggests, call Apple and order a replacement original disc for about $17. They will ask you the model and serial numbers.
Your retail version of Snow Leopard OS 10.6.3 will not work on that Mac as it requires a minimum of OS X 10.6.7 to boot and operate.
Another alternative is to again borrow another Mac to install your retail Snow Leopard into an external HD or partition, upgrade it to 10.6.8 and then clone it back to a partition on your MBP. -
I have a bulk update page which has editable columns and some links which will show a report in the region below. When the user makes changes to editable columns and clicks on the links, the changes are lost as page is reloaded. is it possible to retain those changes, if not how can submit the page to save the changes onClick of the link?. any ideas are appreciated.
Thanks,
SuryaHi,
It is possible if you make all of the links call the "doSubmit()" function. I have done this for the pagination links on this page: [http://apex.oracle.com/pls/otn/f?p=12053:3]
If you hover over the Next link, you should see the following in the status bar:
javascript:doSubmit('f?p=12053:3:3353913908100655:pg_R_7105723812985186598:NO&pg_min_row=11&pg_max_rows=10&pg_rows_fetched=10');Obviously, the link itself is generated by Apex and is for pagination purposes. However, you could construct something similar in your report column's HTML Expression (rather than using the normal Link settings). Something like:
<a href="javascript:doSubmit('f?p=&APP_ID.:3:&SESSION.');"<#COLUMNNAMETOSHOWFORLINK#</a>You can update the URL to include the passing of values into page items as well - I've not shown that here.
You then also need a conditional page branch. Create a new branch and set the Target Type to "URL" instead of "Page in this Application". Then, in the URL Target setting, add in:
&REQUEST.and set a PL/SQL Expression condition of:
:REQUEST LIKE 'f?p=%'The doSubmit() submits the page and sets the REQUEST value to the URL. The branch's condition will detect this and redirect to the URL itself
This was all based on [http://www.oracle.cc/2009/08/11/force-page-submits-when-paginating-through-a-report/]
Andy -
what code can I snipplet to cange to a page in iweb using the refresh and timer method?
Try using Cyberduck (set to UTF-8) to upload your site. Some people find this solves the problem without the need to change page names.
http://cyberduck.ch/
Maybe you are looking for
-
can i pre order and purchase an iPhone 6 from the canada apple store online and have the phone shipped to ontario using a master card from another country?
-
Classes+resources in JAR: have to add each single Jar file to CLASSPATH?
Hello, For my application, I plan to easily embed plugins that can be added by the user by copying it into a subfolder "plugins". Now, I start my app from a shellscript and in order to load resources from within some of these Jars (e.g. using Class.g
-
Reading from XML and printing on console
I have an XML file like this <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE ROOT SYSTEM "matches.dtd"> <ROOT> <row> <field name="MatchNo">1</field> <field name="Date">2006-06-09</field> <field name="Time">18:00:00</field> <field name="Team1">German
-
How can I pass Global Variable from Page1 to Page2
I have the following senario. Pag1 - report is based on following PL\SQL declare g1 varchar2(100); begin g1 = select * from emp where dept = 10; return g1; end; Now I have Page2 - based on following PL\SQL declare g2 varchar2(100); begin g2 := g1; --
-
Why can't I see my podcasts in "List" view?
Just upgraded to version 11.1.4.62. I have 420 podcasts (from 3 different podcasts) and when I choose "Unplayed" view it shows all of the podcasts. But as soon as I change it to "List" view, it only shows 3 podcasts from 1 podcast I'm subscribed to