Encrypt/decrypt in Oracle Forms BEFORE calling a database SP or DML statement

Hi. I am working on an application where we need to encrypt information before it is sent to the database. I know that the database has a great set of stored procedures for handling encryption and decryption. The only challenge here is the fact that I would need to send unencrypted information to the database "in the clear". Ideally, I'd like to encrypt the information inside the form and then send it to the database. On retrieval, retrieve the information and then have the forms application decrypt the encrypted information.
Has anyone done this as a package inside of a PLL without any calls to a DBMS_ package?
Thanks,
BradW

If I understand what you are trying to accomplish correctly, a better approach might be to protect your data by encrypting the network traffic between the middle tier and the db. This would ensure the entire sqlnet exchange has been protected and not just any one piece of data. Once the data has been safely moved to the db tier, you can then use the DB Crypto package to encrypt any individual data you want stored in tables protected. Doing it this way will prevent you from having extra Forms application code and prevent you from writing your own risky security routine in Java.
Refer to the Oracle Net Services documentation for information on how to encrypt the net traffic between client and db. Remember that the "client" in this case is the middle tier Forms environment and not the end-user. Here are some helpful references:
http://docs.oracle.com/cd/B28359_01/network.111/b28530/toc.htm
http://docs.oracle.com/cd/B28359_01/network.111/b28316/toc.htm

Similar Messages

How to connect oracle forms 6i with .odb database

Hai,
I need to connect oracle forms 6i with .odb database.
What are the software i need to install.
tell me the steps hoe to connect the oracle forms6i with .odb database

I must say honestly that I got a little ticked when you have mentioned .odb is oracle lite.You should mention the complete name of the software whichever it may be as its not at all mandatory,everyone would know the acronym.
Anyways,a quick search revealed this.
Connect Forms 6i application to Oracle 10g Lite database on notebook
I have not worked in Oracle lite at all.So I can't help much in it.But as per the thread,it wont be a straight connectivity.I would suggest you contact Support
Aman....

TRIPLEDES Encrypt/Decrypt in Oracle

We are having issues in oracle encryption/decryption.
In our web application,We receive a number as input from the user which is encrypted & encoded using DES3 in .NET.
This encrypted value is stored in the oracle database. We need to decrypt it in oracle8.1.7 to get
the original number entered by the user.
We are using the following code and facing issues.
declare
decrypted_string VARCHAR2(2048);
input_string VARCHAR2(2048);
begin
DBMS_OBFUSCATION_TOOLKIT.DES3Decrypt (input_string=> hextoraw('a403de8264ec0b60a09c6d115768aff0'),
key_string=>hextoraw('6d6f68616d6d6164616c6c616d6261647368616831323334'),
Decrypted_string=>decrypted_string);
dbms_output.PUT_LINE('vr_decrypted is:' || decrypted_string);
end;
We have taken the string 'hello ho'.
This text is encrypted and encode ni .NET in DES3 which is the input string 'a403de8264ec0b60a09c6d115768aff0'.
and the key is the encoded format of the key used to encrypt the input string.
we are not getting the decrypted value as expected. thats 'hello ho'

If I understand what you are trying to accomplish correctly, a better approach might be to protect your data by encrypting the network traffic between the middle tier and the db. This would ensure the entire sqlnet exchange has been protected and not just any one piece of data. Once the data has been safely moved to the db tier, you can then use the DB Crypto package to encrypt any individual data you want stored in tables protected. Doing it this way will prevent you from having extra Forms application code and prevent you from writing your own risky security routine in Java.
Refer to the Oracle Net Services documentation for information on how to encrypt the net traffic between client and db. Remember that the "client" in this case is the middle tier Forms environment and not the end-user. Here are some helpful references:
http://docs.oracle.com/cd/B28359_01/network.111/b28530/toc.htm
http://docs.oracle.com/cd/B28359_01/network.111/b28316/toc.htm

How can I encrypt/decrypt data in Forms using a specified Package?

Hi All,
I have searched in the Internet for ecnrypting/decrypting data in Forms.
That is when I want to query the data outside the Form Application it will be encypted, otherwise if I want to query it in the form application it will be dycrypted
I found this package:
CREATE OR REPLACE PACKAGE Encrypt_pkg AS
FUNCTION encrypt (p_text IN VARCHAR2) RETURN RAW;
FUNCTION decrypt (p_raw IN RAW) RETURN VARCHAR2;
END Encrypt_pkg;
CREATE OR REPLACE PACKAGE BODY Encrypt_pkg AS
-- All VARCHAR2 inputs are padded to multiples of 8 charaters,
-- with the encryption key also being a multiple of 8 charaters.
-- The encryption key and padding characters can be altered to suit.
g_key RAW(32767) := UTL_RAW.cast_to_raw('12345678');
g_pad_chr VARCHAR2(1) := '';
PROCEDURE padstring (p_text IN OUT VARCHAR2);
FUNCTION encrypt (p_text IN VARCHAR2) RETURN RAW IS
l_text VARCHAR2(32767) := p_text;
l_encrypted RAW(32767);
BEGIN
padstring(l_text);
DBMS_OBFUSCATION_TOOLKIT.desencrypt(input => UTL_RAW.cast_to_raw(l_text),
key => g_key,
encrypted_data => l_encrypted);
RETURN l_encrypted;
END;
FUNCTION decrypt (p_raw IN RAW) RETURN VARCHAR2 IS
l_decrypted VARCHAR2(32767);
BEGIN
DBMS_OBFUSCATION_TOOLKIT.desdecrypt(input => p_raw,
key => g_key,
decrypted_data => l_decrypted);
RETURN RTrim(UTL_RAW.cast_to_varchar2(l_decrypted), g_pad_chr);
END;
PROCEDURE padstring (p_text IN OUT VARCHAR2) IS
l_units NUMBER;
BEGIN
IF LENGTH(p_text) MOD 8 > 0 THEN
l_units := TRUNC(LENGTH(p_text)/8) + 1;
p_text := RPAD(p_text, l_units * 8, g_pad_chr);
END IF;
END;
END Encrypt_pkg;
** Now How can I use this package to encrypt/decrypt data in the form as I said Plz???

<p>Read this article and go to chapter 2.3.2.</p>Inserts, Update and Delete orders are managed by a stored procedure. In the sample dialog, the Select is handled by the emp_pkg.emp_query() stored function:
PROCEDURE emp_query(emp_data IN OUT emptab) IS
    ii NUMBER;
    CURSOR empselect IS
      SELECT empno, ename, job, sal, comm FROM emp
       ORDER BY ename ;
BEGIN
    OPEN empselect;
    ii := 1;
    LOOP
      FETCH empselect INTO
        emp_data( ii ).empno,
        emp_data( ii ).ename,
        emp_data( ii ).job,
        emp_data( ii ).sal,
        emp_data( ii ).comm;
      EXIT WHEN empselect%NOTFOUND;
      ii := ii + 1;
    END LOOP;
END emp_query;In your case, all you have to do is th use your decrypt() function in the cursor definition:
    CURSOR empselect IS
      SELECT decrypt(empno), decrypt(ename), decrypt(job), decrypt(sal), comm FROM emp
       ORDER BY ename ;
...For Insert and Update events, use the crypt() function in the related stored procedures.
PROCEDURE emp_insert2(t IN emptab) IS
BEGIN
    FOR i IN t.first..t.last LOOP
     INSERT INTO emp (empno, ename, job, sal, comm)
     VALUES(crypt(t(i).empno), crypt(t(i).ename), crypt(t(i).job), crypt(t(i).sal, t(i).comm));
     END LOOP ;
END emp_insert2;Idem for the Update procedure.
Francois

Can I use Oracle Forms Services 11g with Database 9.2.0.8.0?

Hi everyone.
My department is evaluating development tools in order to build new web applications, and also possibly to migrate current applications buit with Oracle Forms 6.0.5.34.0. Our database is Oracle9i Enterprise Edition Release 9.2.0.8.0 - 64bit.
We have read that the newest Oracle Forms version is Oracle Forms Services 11g. Is Oracle Forms Services 11g compatible with Oracle9i Enterprise Edition Release 9.2.0.8.0 - 64bit? or would we have to migrate our RDBMS to Oracle 11g?
If our database is compatible, what would we need to develop and deploy applications with Oracle Forms Services 11g?
Many thanks in advance.

Wheter it's compatible or not: Database 9.2.0.8 is in sustaining support which means you won't get patches for it. So even if it is compatible I'd opt to upgrade to a newer version, as I wouldn't feel comfortable having a not-supported product out in production.
Have a look at the certification matrix for supported configurations
http://www.oracle.com/technetwork/middleware/downloads/fmw-11gr1certmatrix.xls
As for the requirements; most things can be found on the forms homepage on OTN:
http://www.oracle.com/technetwork/developer-tools/forms/
or at the documentation:
http://download.oracle.com/docs/cd/E17904_01/index.htm
cheers

Rename File in Oracle Forms before Copy to another drive

Dear All Seniors
I want to ask that how to rename file before copy it to other drive.
Actually when we get file from drive to open then it that time before copying I want to rename it.
------this code i am using for copying file from first path to other.
DECLARE
filename VARCHAR2(500);
BEGIN
filename := GET_FILE_NAME( File_Filter => 'Files (*.*)|*.*|');
READ_IMAGE_FILE(filename, 'any', 'IMAGE6');
HOST ('xcopy "'|| filename ||'" \\172.172.0.4\Combo_pic\',no_screen);
END;
I am using this code it is working fine, but i did't know how to use it before copying file.
host('cmd /c rename "'||:block3.file_name||'" " '||:block3.file_name_n||' " '); --- for file rename
thanks.

Ghulam Yassen wrote:
Dear All Seniors
I want to ask that how to rename file before copy it to other drive.
Actually when we get file from drive to open then it that time before copying I want to rename it.
------this code i am using for copying file from first path to other.
DECLARE
filename VARCHAR2(500);
BEGIN
filename := GET_FILE_NAME( File_Filter => 'Files (*.*)|*.*|');
READ_IMAGE_FILE(filename, 'any', 'IMAGE6');
HOST ('xcopy "'|| filename ||'" \\172.172.0.4\Combo_pic\',no_screen);
END;
I am using this code it is working fine, but i did't know how to use it before copying file.
host('cmd /c rename "'||:block3.file_name||'" " '||:block3.file_name_n||' " '); --- for file renameDear Ghulam Yassen,
As salamualikum
>HOST ('xcopy "'|| filename ||'" \\172.172.0.4\Combo_pic\',no_screen);
Change the above line by the following line. It will rename as well as copy.
HOST ('xcopy "'|| filename ||'" \\172.172.0.4\Combo_pic\'||:EMP_CODE||'.jpg',no_screen); ---here EMP_CODE is a column value.Above code will rename to emp_code value.
Hope this works...
Hamid

Calling web service from oracle forms 10g

Problem Description:
I'm following the steps as per the doc:
http://www.oracle.com/technology/products/forms/htdocs/10gr2/howto/webservicefromforms/ws_10_1_3_from_forms.html
to create a java stub to call external web service and then use java importer in oracle forms to call this web service from oracle forms.
WSDL for external web service used is http://gend:83/DesignService.svc?wsdl
The service was developed by us.
Calling the web service using JDeveloper works fine but when I complie in Oracle Forms it returns wrong number of types of arguments in call SENDHELLO.
The code from oracle form to call web service is as below:
DECLARE
jo ora_java.jobject;
xo ora_java.jobject;
rv varchar2(2000);
ex ora_java.jobject;
str varchar2(100);
BEGIN
jo := GendServiceClient.new;
rv := GendServiceClient.sendHello('Nora');
EXCEPTION
WHEN ORA_JAVA.JAVA_ERROR then
message('Unable to call out to Java, ' ||ORA_JAVA.LAST_ERROR);
WHEN ORA_JAVA.EXCEPTION_THROWN then
ex := ORA_JAVA.LAST_EXCEPTION;
message(Exception_.toString(ex));
END;
Any help/ideas on this is greatly appreciated. Thanks.
Edited by: KE Nora Loera on Jun 1, 2012 1:24 PM

My primary skill is PL/SQL but the only information I found on Oracle's site to call a web service from a 10g Form was creating a jar file and importing the java class. Since I don't want to ask our corporate IT to make changes on the UNIX box for the jar files I went a different route.
I use UTL_HTTP.BEGIN_REQUEST to call a URL then load I load the data to a table as a CLOB since we have more than 4000 characters. Now I need to parse the XML and load it into a form. I have never done this so if there is a helpful site please let me know. I have looked at several sites but none do what I want.
Thanks

Calling web service from oracle forms fails with ORA_JAVA.JAVA_ERROR

Problem Description:
I'm following the steps as per the doc:
http://www.oracle.com/technology/products/forms/htdocs/10gr2/howto/webservicefromforms/ws_10_1_3_from_forms.html
to create a java stub to call external web service and then use java importer in oracle forms to call this web service from oracle forms.
WSDL for external web service used is http://www.webservicex.net/CurrencyConverter.asmx?wsdl
Calling the web service using JDeveloper works fine but from Oracle Forms returns ORA_JAVA.JAVA_ERROR; Unable to call out to Java, Invalid object type for argument 1
The code from oracle form to call web service is as below:
DECLARE
jo ora_java.jobject;
rv ora_java.jobject;
ex ora_java.jobject;
outString varchar2(2000);
BEGIN
jo:= CurrencyConvertorStub.new;
--This will get the exchange rate from US Dollars to UK Sterling.
rv:= CurrencyConvertorStub.ConversionRate(jo,'CAD','USD');
message (float_.floatValue(RV));
EXCEPTION
WHEN ORA_JAVA.JAVA_ERROR then
message('Unable to call out to Java, ' ||ORA_JAVA.LAST_ERROR);
WHEN ORA_JAVA.EXCEPTION_THROWN then
ex := ORA_JAVA.LAST_EXCEPTION;
outString := Exception_.toString(ex);
message(outString);
END;
Any help/ideas on this is greatly appreciated. Thanks.

Yes, it is the message line - so basically this call fails => rv:= CurrencyConvertorStub.ConversionRate(jo,'CAD','USD'); and control goes in the exception block
WHEN ORA_JAVA.JAVA_ERROR then
message('Unable to call out to Java, ' ||ORA_JAVA.LAST_ERROR);
Below is the code from java stub that was generated using JDeveloper by using web services stub/skeleton and associating the WSDL
public Double ConversionRate(String FromCurrency, String ToCurrency) throws Exception
URL endpointURL = new URL(endpoint);
Envelope requestEnv = new Envelope();
Body requestBody = new Body();
Vector requestBodyEntries = new Vector();
String wrappingName = "ConversionRate";
String targetNamespace = "http://www.webserviceX.NET/";
Vector requestData = new Vector();
requestData.add(new Object[] {"FromCurrency", FromCurrency});
requestData.add(new Object[] {"ToCurrency", ToCurrency});
requestBodyEntries.addElement(toElement(wrappingName, targetNamespace, requestData));
requestBody.setBodyEntries(requestBodyEntries);
requestEnv.setBody(requestBody);
Message msg = new Message();
msg.setSOAPTransport(m_httpConnection);
msg.send(endpointURL, "http://www.webserviceX.NET/ConversionRate", requestEnv);
Envelope responseEnv = msg.receiveEnvelope();
Body responseBody = responseEnv.getBody();
Vector responseData = responseBody.getBodyEntries();
return (Double)fromElement((Element)responseData.elementAt(0), java.lang.Double.class);
}

Live Demo of sending SMS from Oracle Forms.

I've just a posted a live demo of how to develop code to call a web service to send and SMS from Oracle Forms.
Regards
Grant
http://otn.oracle.com/formsdesignerj2ee
http://groundside.com/blog/GrantRonald?title=live_demo_of_sending_an_sms_from_forms&more=1&c=1&tb=1&pb=1

Welcome to the Oracle Forums. Please take a few minutes to review the following:
<ul>
<li>Before posting on this forum please read
<li>10 Commandments for the OTN Forums Member
<li>Announcement: Forums Etiquette / Reward Points
</ul>
Do anybody know about sending the sms from oracle forms.If anybody had means please send me the script...... This is a commonly asked question. Have you tried searching the forum for possible solutions? Take a look at this search result. I would also recommend you take a look at the Oracle Forms Services 11g web page and scroll down to the Oracle Forms 11g calling a web service link. This is a white paper published by Grant Ronald that specifically describes the process of sending SMS from Oracle Forms.
Craig B-)
If someone's response is helpful or correct, please mark it accordingly.

Regards sending text sms from oracle forms 10g

Do anybody know about sending the sms from oracle forms.If anybody had means please send me the script......

Welcome to the Oracle Forums. Please take a few minutes to review the following:
<ul>
<li>Before posting on this forum please read
<li>10 Commandments for the OTN Forums Member
<li>Announcement: Forums Etiquette / Reward Points
</ul>
Do anybody know about sending the sms from oracle forms.If anybody had means please send me the script...... This is a commonly asked question. Have you tried searching the forum for possible solutions? Take a look at this search result. I would also recommend you take a look at the Oracle Forms Services 11g web page and scroll down to the Oracle Forms 11g calling a web service link. This is a white paper published by Grant Ronald that specifically describes the process of sending SMS from Oracle Forms.
Craig B-)
If someone's response is helpful or correct, please mark it accordingly.

Printing a Oracle PDF Report from within a Oracle Form on Linux

Is there a command I can use in Oracle Forms to invoke a shell script to open a PDF output report stored on a physical location on the Linux server and print it to the printer?
What I'm currently trying to do is send a Report called within Oracle Forms 10g to "DESTYPE=FILE DESFORMAT=PDF DESNAME=directory/filename.pdf". I'm storing all the information about the file and printer information prior to it being run with the RUN_REPORT_OBJECT. What I want to happen is as soon as it finishes generating the file, I want (behind the scenes) is it to locate the file, open, and print it automatically, but never show the output to the user on the screen.
I know with the "DESTYPE=cache DESNAME=filename DESFORMAT=PDF" that it puts the info in the Reports Server / Cache directory, but also opens it in a separate browser window of which you can select the printer at that point. I don't want to do that in this option.
I previously tried to use the "DESTYPE=printer" option but, the issue with it has to deal with fonts. I do not want to store fonts on every printer, given the different types of printers our users have. I can print to the printer but the fonts are all messed up so, not an option.
So, basically I'm trying to replace that option with generating to a PDF, then I don't have to worry about fonts, since I have them all working, then I can just open the PDF file on the server and send to the printer. I was wondering if that is an option available in Oracle Forms when calling reports. I figured that when someone sends the option of "DESTYPE=printer" that it must be calling some shell script on Linux that handles this. I'm just not seeing it.
Any help is appreciated.
Chris

Ok, one final question because I want to see how far this can go.
Can I issue this command via the HOST inside the form? Basically I'm telling it to open and send the file to the printer. The vFileName is the directory/filename stored on the Linux Server. I can execute this command on the command line of Linux and it works
HOST( 'lpr -P gt-ybs-ps /u11/app/as10g/tools/web/html/pc_rp00120100210035258.pdf');
I promise this is my last quesion.
Chris

Oracle forms in APEX problem

Hi all,
I have called oracle forms into my oracle apex application through iframe but having few problems.
Sometimes oracle forms in iframe region got stuck and then not work any more and if I logout from apex and login again it still in that stuck position.
I don't no what to do now.
I am thinking that it is reading from cache and i tried to close browser and clear cache and then login it still in that position.
I want that whenever oracle forms are called it, does not read cache and run from scratch.
Any solution guys.....
Thanks

You should check this link:
https://apex.oracle.com/pls/apex/f?p=31517:95
Denes Kubicek
http://deneskubicek.blogspot.com/
http://www.apress.com/9781430235125
https://apex.oracle.com/pls/apex/f?p=31517:1
http://www.amazon.de/Oracle-APEX-XE-Praxis/dp/3826655494

Icons not displaying in oracle forms.

Hi All,
I am trying to display icons on Oracle forms 10g.I just brought over these forms from another system and I am trying to display the icons like next record, clear form etc..
I have done the following steps so far. The icons are still not displaying. Appreciate any help.
Created a folder in D:\oracle\oracleas\forms\java called icons.
Copied all gif files and jpeg files into icons. Then created a jar file.
D:\oracle\oracleas\forms\java>jar -cvf my_icons.jar icons
It created the jar file in the same directory D:\oracle\oracleas\forms\java
Also changes were made to these files as shown below each file.
forms.conf
AliasMatch ^/forms/icons/(..*) "D:\oracle\oracleas\forms\java\icons/$1"
registry.dat
default.icons.iconpath=http://servername:7778/forms/java/
formweb.cfg
# Forms applet parameter
codebase=/forms/java
# Forms applet parameter
imageBase=codebase
# Forms applet archive setting for JInitiator
archive_jini=frmall_jinit.jar,frmmain.jar, frmjdapi.jar, my_icons.jar
# Forms applet archive setting for other clients (Sun Java Plugin, Appletviewer, etc)
archive=frmall.jar,frmmain.jar, frmjdapi.jar, my_icons.jar
Also added this line under orion-web-app in orion-web.xml file.
<virtual-directory virtual-path="/icons" real-path="D:\oracle\oracleas\forms\java\icons" />
Restarted the OC4J forms server after any change.

To test your configuration, you can try building an URL:
i.e.
http://localhost:8889/forms/frmservlet/icons/iconname.gif
Does it show the icon ?
If that does not work, I would try re-generating the my_icons.jar file, but instead of going directly to the forms/java/icons folder, copy the icons folder to the root directory i.e. c:\icons and execute the command to jar the icons folder, then redeploy the my_icons.jar file.
Then try again with the URL... if the URL does not work, you still have configuration issues.
PS: Don't forget to clear the cache in your browser so that the new .jar files is loaded?
Furthermore:
========
Remove the changes made to the forms.conf and orion-web.xml, they are only needed if the icons are
not stored in a .jar file.
forms.conf
AliasMatch ^/forms/icons/(..*) "D:\oracle\oracleas\forms\java\icons/$1"
orion-web.xml
<virtual-directory virtual-path="/icons" real-path="D:\oracle\oracleas\forms\java\icons" />
Edited by: Rodolfo Ferrari on Jun 17, 2009 6:14 PM
To double check your configuration, follow steps in metalink note 232413.1 - How to Deploy Iconic Images via a JAR File in Forms 9i/10g?.
Edited by: Rodolfo Ferrari on Jun 17, 2009 7:19 PM
Edited by: Rodolfo Ferrari on Jun 17, 2009 7:24 PM

Oracle Forms using call_forms

I am modifying a form to add call_forms. While running the form in query, it displays an error for calling a form. If I commit the form before calling the
new form, it works ok. Any idea how to call the form without committing.
Thanks

Hello,
What you mean by running form in query ? As far as i am getting you is that you are opening your form in enter query mode and from there you are trying to call a another form.
If this is the case then you are lacking in concepts. You can never move out of block in the enter query mode. For performing any other operations besides making query, you have to come out of the query mode.
You can coem out out of query mode by pressing button with proper code of pressing "X" on the corner of forms window.
In your case i asume that you are coming out of enter quey mode by pressing the commit button. But this should be displaying message "NO CHANGES TO SAVE". So, by this way you come out of enter query mode and hence able to call a new form.
For solving this problem first come out of enter query mode and then call other form.

Launching Swing GUI from Oracle Forms Web Based

Hi there,
I have oracle forms which call a shell script which initiates the java swing gui. I am using host command to run this script. When I am doing it on unix server everything works fine. Now we want same application on web now i am getting problem. The host command is not working in this case. It can not launch the java gui. Can anybody tell me what will be the nice approach to do it.
Thanks
Ranjan

Hi,
you'll have to create a Java Bean in Forms that calls the runtime. You can also use webutil, available on otn to call a client side host command.
Frank

Encrypt/decrypt in Oracle Forms BEFORE calling a database SP or DML statement

Similar Messages

Maybe you are looking for