Column Template conditions foiled by a single quote

I am using a generic column template and have a few pl/sql conditions to shade different rows like so:
'#1' like '%Total%'This worked fine until an employee's name appeared in the first column with a single quote in his last name (like O'Brien). Well apparently Apex literally takes whatever is in the field and just shoves it in between the single quotes because the single quote is terminating the string as if you were doing this in sql instead of making it a bind variable:
'O'BRIEN' like '%Total%'Which results in this friendly message to the users:
ORA-06550: line 1, column 65: PLS-00103: Encountered the symbol "BRIEN" when expecting one of the following: ) , * & | = - + < / > at in is mod remainder not rem => .. <> or != or ~= >= <= <> and or like LIKE2_ LIKE4_ LIKEC_ as between from using || multiset member SUBMULTISET_
Error ERR-1025 Error processing PLSQL expression. 'O'BRIEN, JOHN P ' like '%Total%' Can someone from the Apex team confirm that this is the issue? I know I could do a replace on the single quote in my sql, but can't figure out how to escape the '#1#' properly so I don't have to do a replace. I also don't really want to use the Carl Backstrom approach of having to code in a class into the sql when these templates work for 99% of what I need to do.
Any ideas?

Dude you rock! I tried about 6 different combos of the q function before I got frustrated and posted. I had too many quotes in mine I guess but that works perfectly.
Thanks again!

Similar Messages

#COLNUM# #COLUMN_VALUE# in column Template Condition

Hi,
Is it a limitation to use #COLNUM# #COLUMN_VALUE# in column Template Condition?
I specify a column template condition #COLNUM#=3 in the column template condition, but the error
"ERR-1025 Error Processing PLSQL expression #COLNUM#=3" prompt.
Is that a limitation?
Thanks

Hi,
I can use column name in template column condition with no problem, but I want to apply the condition to few fixed columns(more than 10 columns),
I know I can do something in the SQL query of the report, but it will be too tedious.
If only the #COLNUM# etc is usable in template column condition, it will save a lot of job.
Anyone know the reason #COLNUM# not usable in template column condition?
Thanks

Generic Column Template - Column Template Conditions

Hi,
I have the following sql report snippet (as an example):
select a,b,c,apex_item.checkbox(1,active_flag,DECODE (active_flag, 'Y', 'CHECKED','')) as "Active"
from tableA
Attached to this report, is a report template which I am trying to attach Column Template Conditions as I basically want to display all rows that have an active flag of 'N' as red or leave as default colour but unfortunately I can't seem to get this to work.
I believe my Column Template Expressions are not correct as I have also tried "ACTIVE" = 'N' and still no luck.
I have the following setup within the Generic Column Template, i,e:
Column Template 1 = <td class="t12datavalue"#ALIGNMENT# style="background:red">#COLUMN_VALUE#</td>
Column Template 1 Condition = Use based on PL/SQL Expression
Column Template 1 Expression = '#1' = 'N'
Column Template 1 = <td class="t12datavalue"#ALIGNMENT#>#COLUMN_VALUE#</td>
Column Template 1 Condition = Use based on PL/SQL Expression
Column Template 1 Expression = '#1' <> 'N'
Any ideas what I could be missing?
Thanks,
Tony.

Hi Tony,
I think the issue here might be because the field you are trying to evaluate in the column template is a Check box. I tried this and it worked :-
select a,b,c,apex_item.checkbox(1,active_flag,DECODE (active_flag, 'Y', 'CHECKED','')) as "Active",active_flag
from tableA
In the report attributes set the second active_flag column to not show (i.e. the one that is not the check box).
In the Column Template
Column Template 1 = <td class="t12datavalue"#ALIGNMENT# style="background:red">#COLUMN_VALUE#</td>
Column Template 1 Condition = Use based on PL/SQL Expression
Column Template 1 Expression = '#ACTIVE_FLAG#'='N'
Column Template 1 = <td class="t12datavalue"#ALIGNMENT#>#COLUMN_VALUE#</td>
Column Template 1 Condition = Use based on PL/SQL Expression
Column Template 1 Expression = '#ACTIVE_FLAG#'='Y'
Regards
Paul

Report Template, Column Template, Column Template Condition

I have a template, Standard Revenue from Standard, I have cloned for a Classic report.
Application ###>Shared Componets>Templates>Edit Report Template
Column Template 1 looks like:
<td#ALIGNMENT# headers="#COLUMN_HEADER_NAME#" class="t1data_revenue">#COLUMN_VALUE#</td>
I have set Column Template 1 Condition to:
"Use based on PL/SQL expresiion"
I have tried several expression in "Column Template 1 Expression" - last one is:
case
when #COLNUM# <= 2 then false
when #COLUMN_VALUE# < 0 then true
else false
end case;
I am trying to use the value in "Column Template 2" when to value of the #COLUMN_VALUE# < 0
where "Column Template 2" is :
<td#ALIGNMENT# headers="#COLUMN_HEADER_NAME#" class="t1data_revenue_negative">#COLUMN_VALUE#</td>
I get the following error when I run the page:
ORA-01403: no data found
and
ERR-1025 Error processing PLSQL expression. case when #COLNUM# <= 2 then false when #COLUMN_VALUE# < 0 then true else false end case;
Any help will be appreciated.
thank you,
jwm

Hi,
That's actually easier. See: [http://apex.oracle.com/pls/otn/f?p=267:60]
The SQL for both reports is:
SELECT EMPNO, ENAME, NVL(SAL,0) SAL, NVL(COMM,0) COMM
FROM EMP
ORDER BY EMPNOThe SAL and COMM columns have been formatted using:
999G999G999G999G990D00For the Row Template, the Row Template 1 setting contains an empty space (you have to have something in there otherwise Apex adds back in a default row containing five cells!). The condition for this is:
TO_NUMBER('#COMM#','999G999G999G999G990D00') < 100The template will see the data as a string, so we use the same number format to convert that string back into a number and compare this to 100. If we didn't use formatting on the numbers and we are sure that every row contained a number (hence the use of NVL()), then you could use:
#COMM# < 100Row Template 2 contains the format for the rows that need displaying:
<tr>
<td class="t18Data">#1#</td>
<td class="t18Data">#2#</td>
<td class="t18Data" style="text-align:right">#3#</td>
<td class="t18Data" style="text-align:right">#4#</td>
</tr>and is unconditional.
The only other settings on the Row Template are the Before Rows:
<table class="t18Standard" style="border-collapse:collapse; border:1px solid black;">
<tr>
<th class="t18ReportHeader">Empno</th>
<th class="t18ReportHeader">Ename</th>
<th class="t18ReportHeader" style="text-align:right">Sal</th>
<th class="t18ReportHeader" style="text-align:right">Comm</th>
</tr>and After Rows:
</table>Of course, you will note that the record counters at the bottom still show the number of records in both reports - as the SQL still outputs the same data, this doesn't change.
Andy

Report template - How to reference COLNUM in the col template condition?

Hi,
I have a query with 4 columns. based on this query I would like to make a report with a row layout that looks something like this:
| column1 value |
| column2 value | column3 value | column4 value |
I created a report template, four column templates: one for column 1, one for the following columns and one for the las column of the report.
My problem is that when I reference *#COLNUM#* like mod(#COLNUM#,4) = 1 in the Column Template condition fields, then I get *'ORA-06550: line 1, column 34: PLS-00103: Encountered the symbol "#" when expecting one of the following: ( ) - +....'*
Is referencing COLNUM not allowed in the Column Template Condition field?
Tamas
Edited by: Tamas Szecsy on Jul 16, 2011 11:33 PM

Tamas Szecsy wrote:
I have a query with 4 columns. based on this query I would like to make a report with a row layout that looks something like this:
{noformat}| column1 value |{noformat}
{noformat}----------------------------------------------------------------{noformat}
{noformat}| column2 value | column3 value | column4 value |{noformat}
I created a report template, four column templates: one for column 1, one for the following columns and one for the las column of the report.For this you need to create a Named Column (row template), not Generic Columns (column template).
Before Rows
<table class="foo">
Row Template 1
<tr>
<td colspan="3">#1#</td>
</tr>
<tr>
<td>#2#</td>
<td>#3#</td>
<td>#4#</td>
</tr>
After Rows
</table>No conditions.
What about table headers?
My problem is that when I reference *#COLNUM#* like mod(#COLNUM#,4) = 1 in the Column Template condition fields, then I get *'ORA-06550: line 1, column 34: PLS-00103: Encountered the symbol "#" when expecting one of the following: ( ) - +....'*
Is referencing COLNUM not allowed in the Column Template Condition field?I suspect not. Only <tt>#ROWNUM#</tt> is mentioned in the online help for Column/Row Template Expressions. <tt>#COLNUM#</tt> is only indicated in the Column/Row Templates themselves.
(Always post sample layouts using \...\ and/or {noformat }...{noformat } tags to preserve formatting/stop Jive from turning it into something else.)

Problems with template condition

Hi,
I would like to set a condition for a report template by the column header content.
I have tried the following statement:
instr(#COLUMN_HEADER#, 'TITLE')>0
and I have got the error message:
"ORA-06550: PLS-00103: Encountered the symbol "#" when expecting one of the following: ( ) - + ..."
Do you have any idea why it doesn't work?
Thx!

In plain english :-) :
I want to create a report with news on the start page of a htmldb application. So I have created a table with 3 columns: DATE, HEADLINE, CONTENT. Now I want to create a template for the layout. Every record in the news table should be showed in the following way:
HEADLINE DATE
CONTENT
My idea was to create 3 conditional templates for every column of a record depending on the column's name. For example a new table row (<tr>) for the content column etc.
The column template conditions based on PL/SQL expression (e.g. instr(#COLUMN_HEADER#, 'CONTENT')>0) don't work... :-(

Single quote in dynamic where condition

BAPI_STUDENT_IDENTIFIC_ADD has a field called IDENTIFICATIONNUMBER. This field is later used in a dynamic where condition and causes a short dump when it contains a single quote. I will change the program that calls the BAPI to check for single quotes, but is there anything else I need to check for to ensure a correct where condition?
Thanks,
Dan

Hi Dan,
The best way to ensure correctness of syntax of a dynamic where condition is:
Run the program in debugging mode, Get the Query that is generated dynamically and write it to some other ABAP program and perform syntax check.
This will help you to remove all the syntax errors.
Regards,
Darshil

FYI: Single Quote in column comment problem

SQL Developer Version 1.1.0.23 on Windows XP
If you have a single quote in a column comment and you click on the SQL tab for the table it does not generate two single quotes for each quote in the comment. This generates a syntactically incorrect COMMENT ON COLUMN statement and messes up the rest of the generated statements.
Mike

I am just too far into my project...and it is my first one (it is quite a big project ),and going back to preparedstatement will be quite time consuming.
So indirectly,there is no one statement or inbuilt java methods which takes care of this quote ? I wish there was.
Thanks.

How to use a single quote string in where condition

Hi,
I have one problem in building a query.
SELECT agx_drug_indication.record_id, agx_drug_indication.fk_ad_rec_id,
agx_drug_indication.drugindicationmeddraver, agx_drug.record_id,
agx_drug.fk_apat_rec_id,
REPLACE (agx_drug.medicinalproduct, '''', '''') AS "MEDICINALPRODUCT",
pack_imp_objects.fn_get_arisg_code
(147,
agx_drug_indication.drugindicationmeddraver
) AS "DRUGINDICATIONMEDDRAVER",
agx_drug.drugindication,
NVL (agx_drug.drugcharacterization, 1) AS "DRUGCHARACTERIZATION",
agx_safety_report.record_id, agx_safety_report.case_identifier_no,
agx_safety_report.fk_apat_rec_id,
pack_imp_objects.fn_meddra_llt_matching
(agx_drug_indication.drugindication,
agx_drug_indication.drugindication,
agx_drug_indication.drugindicationmeddraver,
1
) AS "LLT_CODE",
pack_imp_objects.fn_meddra_soccode_matching
(agx_drug_indication.drugindication,
agx_drug_indication.drugindicationmeddraver
) AS "PRIMARY_SOC_CODE",
pack_imp_objects.fn_meddra_soccode_matching
(agx_drug_indication.drugindication,
agx_drug_indication.drugindicationmeddraver
) AS "CASE_SOC_CODE",
pack_imp_objects.fn_meddra_pt_matching
(agx_drug_indication.drugindication,
agx_drug_indication.drugindication,
agx_drug_indication.drugindicationmeddraver
) AS "PT_CODE",
pack_imp_objects.fn_get_aer_id (11) AS "AER_ID"
FROM agx_drug_indication,
agx_drug,
agx_safety_report
WHERE agx_drug_indication.fk_ad_rec_id = agx_drug.record_id
AND agx_drug.fk_apat_rec_id = agx_safety_report.fk_apat_rec_id
AND agx_safety_report.case_identifier_no IS NOT NULL
AND agx_drug_indication.drugindication IS NOT NULL
AND agx_drug.medicinalproduct =
REPLACE ('*-qVAGX_DRUG.MEDICINALPRODUCT*', '''', '''')
In the above query last line '-qVAGX_DRUG.MEDICINALPRODUCT' is a dynamic variable which may or may not contain the single quotes.
Ex: ABC's or just ABC.
The query has to support both single quote and without quote in it.
I wanted everything to be done in the sinlq query on not a PL/SQL Block.
Please help me ASAP

kumar0828 wrote:
<font color="#FF0000"> ... </font>
REPLACE (agx_drug.medicinalproduct, '''', '''') AS "MEDICINALPRODUCT",
<font color="#FF0000"> ... </font> <pre>
REPLACE (agx_drug.medicinalproduct, '<font style="background-color: #E7FA6B">''</font>', '<font style="background-color: #E7FA6B">''</font>')
</pre>
With the above statement you are replacing single quote with another single quote
(which is nonsense).
<font color="#FF0000"> ... </font>
AND agx_drug.medicinalproduct = REPLACE ('*-qVAGX_DRUG.MEDICINALPRODUCT*', '''', '''')
In the above query last line '-qVAGX_DRUG.MEDICINALPRODUCT' is a dynamic variable which may or may not contain the single quotes.This is not a dynamic variable but a string value:
<pre>
AND agx_drug.medicinalproduct =
REPLACE (<font style="background-color: #FF3D55">'*</font>-qVAGX_DRUG.MEDICINALPRODUCT<font style="background-color: #FF3D55">*'</font>, '<font style="background-color: #E7FA6B">''</font>', '<font style="background-color: #E7FA6B">''</font>')
</pre>
*-qVAGX_DRUG.MEDICINALPRODUCT* <pre>
AND agx_drug.medicinalproduct =
REPLACE (<font style="background-color: #FF3D55">q'*</font>-qVAGX_DRUG.MEDICINALPRODUCT<font style="background-color: #FF3D55">*'</font>, '<font style="background-color: #E7FA6B">''</font>', '<font style="background-color: #E7FA6B">''</font>')
</pre>
-qVAGX_DRUG.MEDICINALPRODUCT q'[a]' => a
q'[a']' => a'
q'[a'']' => a''
q'*a*' => a
q'*a'*' => a'
q'*a''*' => a''
A variable also cannot contain a dot (.):
<pre>VAGX_DRUG<font style="background-color: #FF3D55">.</font>MEDICINALPRODUCT</pre>
Ex: ABC's or just ABC.
The query has to support both single quote and without quote in it.
I wanted everything to be done in the sinlq query on not a PL/SQL Block.
Please help me ASAPTry this:
<pre>
AND agx_drug.medicinalproduct = MY_VARIABLE
</pre>

Embedded Single Quote in SQL Column truncates Java String

I have a jsp web page that queries a database to see what day a user is registered for and then produces an URL for the user to click on. My problem is that the URL being processed stops when an embedded single quote is encountered.
Here is the database side:
Database side:
Create Table registration
(reg_id int not null,
name varchar2(45) not null,
day_nb int not null);
Insert into registration
(reg_id, name, day_nb)
values (1043,'Johnny''s Diner', 1);
Select name, day_nb from registration
where reg_id = 1043;
name, day_nb
Johnny's Diner 1
Snippet of relevant java code: (JSP page)
<%
int day_nb = rs.getInt("day_nb");
String particpant_name = rs.getString("name");
System.out.println("registration.jsp: particpant_name = " + particpant_name);
%>
<td width="84%">
     <a
     href='<%=response.encodeURL("registrationHandler.jsp?"particpant_name="+ particpant_name + "&day_nb="+ day_nb)%>'><%=particpant_name%>
                              </a>
                         </td>
{code}
The following is printed to System.Out:
registration.jsp: particpant_name = Johnny's Diner
The code produces the following URL
http://www.mycompany.com/registrationHandler.jsp?particpant_name=Johnny
The response.encodeURL is stopping on the single quote contained in "Johnny's Diner"
The URL I want is:
http://www.mycompany.com/registrationHandler.jsp?particpant_name=Johnny's Diner&day_nb=1
How do I account for the embedded single quote so the code works properly? Thanks In Advance!

You really need to read up on [SQL Injection|http://en.wikipedia.org/wiki/SQL_injection] and [XSS/Cross-Site Scripting|http://de.wikipedia.org/wiki/Cross-Site_Scripting]. Both present massive security problems and your code seems prone to easily producing both.
For SQL Injection attacks the correct solution is to always use PreparedStatements with only hard-coded String (i.e. never use String concatenation to build SQL statements).
For XSS attacks the solution is a bit harder, but basically you need to learn never to trust user input (that includes user input that you've previously stored in the database!) and always escape what the user sent when you print it back out.

Passing #COLUMN_VALUE# as parameter to pl/sql function in column template

Hi all,
I want to color negative amounts in red in sql report using column template.
I created a pl/sql function"isNegativeNum" which returns 1 or -1.
create or replace function isNegativeNum(p_column_value varchar2) return number
as
l_dummy number;
begin
      l_dummy := to_number(p_column_value,'999G999G990D00PR');
      IF l_dummy < 0
         THEN
            RETURN 1;
      else
            return -1;
      END IF;
exception
when others then
   RETURN -1;
end;Below is column template.
Column Template 1
<td class="t3dataalt" #ALIGNMENT#><p color=red>#COLUMN_VALUE#</p></td>Column Template 1 Condition
isNegativeNum('#COLUMN_VALUE#') = -1The issue is #COLUMN_VALUE# value is not being passed to the function, Insert statement in function reveals p_column_value as a string "#COLUMN_VALUE#". When I try without quotes like isNegativeNum(#COLUMN_VALUE#) = -1, I get below error.
ORA-06550: line 1, column 48: PLS-00103: Encountered the symbol "#" when expecting one of the following: ( ) - + case mod new not null others select table avg count current exists max min prior sql stddev sum variance execute multiset the both leading trailing forall merge year month DAY_ hour minute second timezone_hour timezone_minute timezone_region timezone_abbr time timestamp interval date
     Error      ERR-1025 Error processing PLSQL expression. isNegativeNum(#COLUMN_VALUE#) = 1
Any help is appreciated.
Kishore

Hi Kishore,
using #COLUMN_VALUE# would probably not make much sense, because normally a report has multiple columns and not just the numeric column which you want to verify if it's negative. But APEX will fire the template condition for each column, because the report template is a column cell template.
What you can do to make it more generic is to use for example
#CHECK_AMOUNT#
in the template and provide a not displayed column in your SQL statement which contains your value which is named CHECK_AMOUNT. For example:
SELECT NAME
     , BALANCE
     , BALANCE AS CHECK_AMOUNT
FROM XXX;Because this CHECK_AMOUNT column would be a generic name, you can use this template in all your reports as long as you provide this column.
Thope that helps
Patrick

XMLType Transform Single Quotes

When performing a transform into html on an XMLType column in the database, single quotes are getting converted to '.
Here is a sample XSL:
<?xml version="1.0" encoding="UTF-8"?>
<xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform" xmlns:fo="http://www.w3.org/1999/XSL/Format">
     <xsl:template match="/">
          <html>
               <head>
                    <title></title>
               </head>
               <script type="Javascript">alert('here');</script>
               <body>HERE</body>
          </html>
     </xsl:template>
</xsl:stylesheet>
This is the SQL query I use to perform the transform:
select X.XMLData.transform((Select xmldata from xmltest where title='HTMLTest')).getstringval()
from xmltest X where title='HTMLTest'
This is the result of performing the transform/query:
<html>
<head>
<title/>
</head>
<script type="Javascript">alert('here');</script>
<body>HERE</body>
</html>
Under XMLspy's xslt processor and even Oracle's parser.v2.oraxsl, the output is not escaped.
I have tried using CDATA and <xsl:text disable-output-escaping="yes"> as well, but non of them worked.
I am new to XSL, so am probably missing something, anyone have any ideas on how to get around this?
Thanks,
Tom Hubbard

This is a limitation of the current implementation. The correct solution is 'disable-output-escaping' but we do not support it. THe rules of thumb is that the XML DB transform can (currently) only be used to generate valid XML....

Single Quotes Issue??

Hi,
Bit of a strange one - hopefully there is a really simple answer that I will kick myself over….!
I have a query which references a partioned table. When the following condition is added, the query references the intended partion - evident by looking at the explain plan:
and e.dac_end_date >= '20080401'
(VARCHAR2 (8 Byte))
However, I want to automate my script. When I use a variant of the Sysdate function (detailed below) and execute the query, the explain plan indicates that Oracle is doing a full table scan….. Not good!!
e.dac_end_date >= to_char(add_months(sysdate,-1),'YYYYMM')||'01'
I'm guessing this may have something to do with single quotes… I have done a forum trawl, and tried some of the suggestions (char(39)||, three quotes surrounding the 'YYYYMM', concatenating single quotes around the format mask etc) - but I either get an error message, or the query just bombs out after a few seconds.
Anyone have any ideas or suggestions??
Any help greatly appreciated….
Cheers in advance.

Firstly - thanks for the replies.
Just to confirm - the table I'm referring too is ranged partioned on a varchar2 column that contains a date-as-a-string. I didn’t build the tables - I'm not a developer. I'm just trying to automate a query that I have written which on the surface appears to do a full table scan when I use the Sysdate function (instead of a hard coded date).
'Bomb out' - bad grammar, apologies. What I meant was the query appears to complete within a few seconds, however does not return any data.
peticH - I was using 'Session Browser' within Toad to monitor the query (running in another session) - I didn’t realise that even in this instance Explain Plan provides expected rather than actual behaviour. I'll do some reading up on the 'Trace' functionality, to try and see what is actually happening.
Cheers guys.

Report parameter field value has a single quote. need to escape before pass

Report has a parameter whose value might have a single quote in it. If I pass that value directly into the SQL Command... like
where ... user_name = {?parm_user_name}...
which would translate to
user_name='O'Donnel Honda'
I am getting an error... so would like to convert this parameter value into 'O''Donnel Honda' before passing into the query.
I created a formula called parse_user_name with following:
Replace ({?parm_user_name}, "'", "''")
And used in the query like
where ... user_name = {@parse_user_name}...
I am getting an error like invalid SQL92 character...

I think you should use the condition like this
where ... user_name = '{?parm_user_name}'
keep the parameter in single quote at the command level itself.
Now use the same formula like
replace({?Parameter},"'","''")
This works only if the parameter is a single value parameter but not multi value parameter.
Regards,
Raghavendra

Can we have a Single quote in the tooltip text?

Hi,
We have some tooltips for the presentation columns which contains a single quote.
When I try to view the tooltip from answers the single quote is being replaced by double quotes.
I tried to use all sorts of escape characters for single quote, like "\'" and ''' and "'" but that didn't work.
Is there any way to do this.
Thanks!!
Vasantha.P

As I said in my earlier post, I am looking for the tooltips for the Presentation tables and columns. The tooltips for these were extracted from the RPD using the externalize Strings option and these externalized strings are stored in the database.
So I am escaping the single using a single quote both in rpd and in the database.
Example text I have used both in the rpd and database is something like "Shipment's start time". I tried with "Shipment''s start time", " Shipment'''s start time", but it didn't work.
Thanks!!
Vasantha.P

Column Template conditions foiled by a single quote

Similar Messages

Maybe you are looking for