Hiding Username and Password in Web Report URL

Hi there,
I am calling a report from my webforms using the WEB.SHOW_DOCUMENT built-in. The problem is that when using this, when the report or the parameter form is being displayed on the browser, the username and password is also displayed on the browser's URL bar with other report parameters.
Is there any way to surpress or hide the username and password? Please help as this raises some security issues.

First off make sure your form
logs on using an ON-LOGON trigger
using the logon built in. Inside
a form level ON-LOGON trigger put the
following code (i.e.)
logon('username','password@database');
The password and database are concatenated together.
Then you can call reports without
puting the username and password in the
URL. Here are two examples.
web.show_document (i.e.)
web.show_document('URL_HERE','_blank');
or via a run_product (i.e)
Run_Product(REPORTS,'admin_req_snapshot',SYNCHRONOUS, RUNTIME, FILESYSTEM,plist,NULL);
<BLOCKQUOTE><font size="1" face="Verdana, Arial">quote:</font><HR>Originally posted by hkpang ([email protected]):
Hi there,
I am calling a report from my webforms using the WEB.SHOW_DOCUMENT built-in. The problem is that when using this, when the report or the parameter form is being displayed on the browser, the username and password is also displayed on the browser's URL bar with other report parameters.
Is there any way to surpress or hide the username and password? Please help as this raises some security issues. <HR></BLOCKQUOTE>
null

Similar Messages

How to pass username and password with the portal url

i want to access portal from my web site. i have created username and password fields in my web page. when submited , my portal page should open. so how to pass username and password with the portal url.

This is not straightforward; but it is doable.
First tell us about your portal version; portal 10.1.4 has a slightly different method of doing it and the pre-10g portals were completely different animals.
And if you are in AS Rel 2, then the most important document for you would probably be the following:
[Creating Deployment Specific Pages| http://download-west.oracle.com/docs/cd/B14099_19/idmanage.1012/b14078/custom.htm#i1015535]
You might want to use it in conjunction with some metalink notes about your portal version and such a login page.
hope that helps!
AMN

Storing username and passwords in web pages on safari

Hi folks
I am using an iPad 1 and wish to change my previous decisions regarding saving usernames and passwords for web pages within the safari browser.
I guess I have hit the "do not save" or similar option at some stage and I now wish to recall the username and password in future.
Any help would be really appreciated

Make sure that Settings > Safari > AutoFill > Names And Passwords is set 'on'. To be able to store them for sites that you've previously said 'no' to you may also need to clear Safari's history and cache : Settings > Safari > Clear Cache (and Clear History). And possibly clear cookies : Settings > Safari > Clear Cookies

Hiding usernames and passwords

We are attempting to access a form through a URL link from a
web page. The URL contains the username and password, but we
would like to hide this. We are on Forms 6i patchset 8. Reports
has a mechanism of hiding usernames in the url by altering the
config file. Is there any mechanism in forms to achieve this
result. Any help is appreciated.
Thanks.

Can you check out the patch 8 white paper on the forms page. It has a section about passowrd hiding there.
I think that will help.
Regards
Grant Ronald
Forms Product Management

VC Change username and password for web services

Hi everybody
I need to change the username and password into the portal of some web services that have already been created portal is consuming these web services a XI
Thansk
Ivan

it is ok ....
thank you....
i have now this issue:
i need to add new E1 to be in the same trunk for previous E1 which is for Abdali. new E1 will not have signal it depeneds at old one timeslot.
i used this for new E1:
prov-add:nailedtrnk:name="1033",srcsvc="ss7p-jtc-abdali",dstsvc="naspath1-abdali",srcspan="ffff",dstspan="0",srctimeslot="33",dsttimeslot="33",spansize=31
for old one this:
prov-add:nailedtrnk:name="1002",srcsvc="ss7p-jtc-abdali",dstsvc="naspath1-abdali",srcspan="ffff",dstspan="0",srctimeslot="2",dsttimeslot="2",spansize=30
============================
at AS5400 i used to add new E1:
controller E1 7/2
framing NO-CRC4
pri-group timeslots 1-31 nfas_d primary nfas_int 1 nfas_group 0
Is this true or there are other commands i should use?
OLD E1 is configured as:
controller E1 7/0
framing NO-CRC4
channel-group 0 timeslots 1
pri-group timeslots 2-31 nfas_d primary nfas_int 0 nfas_group 0
description Connection to Abdali
interface Serial7/0:0
no ip address
encapsulation ss7
channel-id 0
interface Serial7/0:15
no ip address
encapsulation hdlc
isdn switch-type primary-ni2c
isdn incoming-voice modem
isdn map address . plan isdn type network
isdn rlm-group 0
no isdn send-status-enquiry
isdn negotiate-bchan resend-setup
isdn bchan-number-order ascending
no cdp enable
any help please for correct commands i shall use? please see attached file for details.

Passing portal username and password as parameters in URL iview.

Hi Gurus,
i Have Created URL iView. i want to send the Username and password of portal to this url ,
how can i access the portal username and password.
Note: tried with j_user and j_password
Regards
K Naveen Kishore

Hi,
Jigar Oza
Thanks for u r reply, i have tried with application integrator but there is a problem with usermapping.
now what i have done is created HTTP System based on this system created URL iView,in application parameters username and password as MappedUser and MappedPassword every thing is working fine. user logged in automatically when he logged into portal.
there are tabs ,links in application .when i click on tabs or links it is assking to enter username and password of the application.
did i do any thing wrong in creating HTTP system or URL iView,
what are the necessary properties should be given.
replys are highly appreciated.
Regards
K Naveen Kishore

Sql*plus hiding username and password

Hi All,
I was wondering if there is a way that I can avoid
having to specify username and password when I execute
sqlplus and sqlldr on Unix systems.
I know that If I don't specify a username or password
these programs will prompt for one. That is fine
when I am executing thing in a interactive shell but
if I want to execute these programs from a cron job
I need to have the username and password in my crontab
file and when they execute other users can see my
username and password by executing ...
ps -ef
... How can I correct this problem?

Actually, Oracle Corp. provides a very neat solution to the password problem.
They have a program, called 'hide' which they provide the source for.
Search on Metalink for Note 1009091.6: "HOW DO YOU HIDE USERNAME/PASSWORD IN PS?"
You compile it on your system and you when you want to invoke sqlplus, for instance, you run 'hide sqlplus userid/password'.
The difference is, that when you run a ps, all you see is sqlplus, without the userid and password displayed.
You can rename sqlplus to something else and create a shell script called sqlplus that calls hide.
That way is transparent to the user. Everyone just runs sqlplus like they always have.

How to hide username and passward in web reports

Dear friends
Im runing one report on web but its showing the username and passward in the URL (address bar) can you please help me how to hide that passward.......
let suppose the username/passward is scott/tiger
thanks with regards

for hide the password follow thses steps
user_name := get_application_property(username);
pass := get_application_property(password);
conn := get_application_property(connect_string);
con_url := 'userid='||user_name||'/'||pass||'@'||conn;
/* Convert the connect string into a hexadecimal character string. */
FOR i IN 1..LENGTH(con_url) LOOP
v_a := ltrim(to_char(trunc(ascii(substr(con_url,i,1))/16)));
if v_a = '10' THEN v_a := 'A';
elsif v_a = '11' THEN v_a := 'B';
elsif v_a = '12' THEN v_a := 'C';
elsif v_a = '13' THEN v_a := 'D';
elsif v_a = '14' THEN v_a := 'E';
elsif v_a = '15' THEN v_a := 'F';
end if;
v_b := ltrim(to_char(mod(ascii(substr(con_url,i,1)),16)));
if v_b = '10' THEN v_b := 'A';
elsif v_b = '11' THEN v_b := 'B';
elsif v_b = '12' THEN v_b := 'C';
elsif v_b = '13' THEN v_b := 'D';
elsif v_b = '14' THEN v_b := 'E';
elsif v_b = '15' THEN v_b := 'F';
end if;
con_url_temp := con_url_temp||'%'||v_a||v_b;
END LOOP;
path:='/reports/rwservlet?server=repserver4&destype=cache&'||con_url_temp||'&report='||rep_path);
web.show_document(path);
kuljeet pal singh

Passed username and password on the 10G url to a form

If I have a url (eg;) https://mydomain.com/forms/frmservlet?config=board
is there a way to:
1) add username on the url line
2) modify any of the Forms Server config files to accept username/password
Because what I really want to do is have FrontPage(my front-end app) interrogate who's coming in , isolate the username/password, and pass it on to the url I mentioned on line 1. AND, I don't want Forms to prompt me for a username/password.
So that in the end, FrontPage will pass something like this:
https://mydomain.com/forms/frmservlet?config=board?username=firstname.lastname?password=whateveritis
IS this explanation clear?

you can add a "&" behind the config and use parameters in the URL.
https://mydomain.com/forms/frmservlet?config=board&userid=scott/tiger@db
try it
Gerd

4402 guest users authetication via Web (username and password)

Hello Everyone,
We have an issue with Wireless controller model 4402 loaded with 4.0.179.11. This box has stopped authenticating (Layer3 security Web Policy based local usernames and password) last night.
Steps taken to resolve the issue:-
1) Created local usernames and password via Web and tried using wireless through Guest ssid, when user enters this information web page loops back to authentication.
2) Tried authenticating via another Laptop, had no luck.
3) Changed WLAN SSID Guest from Layer3 security Web Policy to Layer2 Security, created Mac filter table for guest on the Controller. Guest was able to connect to the internet.
We have not made any configuration change. As this issue affected all Users, we restarting the controller after which issue was resolved. As per my colleagues this has happened couple of times and every time restart fixes this issue.
Please shed some light on this.
Regards,
Mujahid

Hi Mujahid,
Just to add a note to the great advice from Richard (5 points for your good work on many posts Richard!)
Have a look at these bugs that I'm pretty sure we were hitting with this WLC Version as well;
CSCsi91600 Bug Details
Internet Explorer redirects to login page with webauth due to cache
Symptom:
Client using IE, and web authentication has passed authentication, Policy Manager is in a RUN state, and when the user clicks on the "home" button, or types in the address of their normal homepage, they are continually redirected to the web-auth page
Conditions:
Client using IE, and web authentication has passed authentication, Policy Manager is in a RUN state, and when the user clicks on the "home" button, or types in the address of their normal homepage, they are continually redirected to the web-auth page
Workaround:
Enable IE client to check for newer versions of stored pages on "every visit to the page" option instead of "automatically" (default).
Tools -> Internet Options... -> Temporary Internet files -> Settings... -> Check for newer versions of stored pages: Every visit to the page.
1st Found-In
4.0(179.11)
Fixed-In
4.1(176.6)
4.1(177.0)
4.1(181.0)
4.2(31.0)
4.2(61.0)
Related Bugs
WLC Web-auth homepage leads back to reauth page if redirect URL is used
In a web-auth deployment with or without guest anchoring. If the redirect url is populated, the users homepage will no longer be able to be reached. Whenever the user navigates back to his homepage it will show the reauth page and the user will no longer be able to reach their homepage. Homepage leads back to reauth page if redirect URL populated
CSCse90894 Bug Details
Internet Explorer redirects to login page with webauth due to cache
Even after the commit of CSCse03666 - which added the following line to the
default webauth HTML -
IE 6 continues to redirect its home page back to the webauth login page.
This is due to a known bug in IE.
1st Found-In
4.0(155.5)
Fixed-In
3.2(193.4)
3.2(193.5)
4.0(206.0)
4.1(171.0)
Hope this helps!
Rob

Hide username and password

Dear all ,
I am using 10g Application server .
How can i hide username , password and connect strig while running report on web by web show document ?

one alternative solution for hiding username and password is
u can use frames.
all u hav to do is the connection code should be written in the frame.
cal this frame from where u hav to cal the report.

Transaction Launcher: Avoid log on Authentication or bypass by defaulting a generic username and password

Dear Mates,
Please find the requirement below,
Due to limited users in ECC system, When launching an ECC transaction from CRM Web UI using Transaction Launcher functionality, the framework is prompting to enter user name and password. Now I need to either avoid user authentication or bypass by defaulting a generic username and password.
I tried passing sap user id and password in ITS URL, but not no luck
Could any one share their valuable comments on this issue?
Thanks,
Raja

Hi Raja,
please have have a look at the following thread: Default User Name and Password for ECC Transaction
It seems to describe exactly your scenarios. The solution proposed there by zafar karnalkar is to set the default username and password in transaction launcher URL in transaction CRMS_IC_CROSS_SYS. The URL parameters necessary for this are:
sap-user= username
sap-password = password.
Best,
Christian

How do I save more than one username and password for one website?

First, let me say that I'm extremely irritated that I just spent 15 minutes writing a very detailed question and researching my OS, browser version, etc. only to have it all erased because I didn't "verify" my e-mail before I started typing my question. Firefox: please fix your sign-up and question posting process so this doesn't happen. It should retain your info for a smooth process after you verify. What a waste of time and effort when I'm already frustrated.
ACTUAL QUESTION: I manage two online calendars under one root URL (www.samplepage.com/calendar1 and www.samplepage.com/calendar2). My e-mail address is the user ID for both accounts but the passwords are different.
FF used to associate your username and password with the ENTIRE URL but now it only associates with the root (www.samplepage.com). So, for me, it will only remember one password.
How can I get it to remember BOTH passwords?
Thanks!

That is not possible with the Firefox password manager. You can only save a user name and its password once for a specific domain, so if the name is the same then it doesn't work.

Username and Password authentication

Hi,
I am new to both JDBC and MSSQL. I've been connecting to msSQL server without providing username and password (DriverManager.getConnection(String url)). I am wondering how to enforce the username and password authentication so that username and password have to be verified before a connection is made. Thanks in advance.

but where can I get the username & password? I can get
the connection even with any username & password, why?Hi WeiHang,
This is regarding the options you have set in the SQL Server. You have to choose from Windows NT authentication and SQL Server Authentication. If you give SQL Server authentication you have mentioned the username and password and you can connect to database simple using DSN(if you are using JDBC-ODBC). However if you choose WindowsNT authentication you donot specify the user name and password there and you have to enter the same at runtime.
Hope this can help you

What is the default username and password for administering my f4500 deskjet printer?

I need to administer my F4500 Deskjet through my web browser, but do not know the username and password. I presume there is a way to default the settings, but I need to know the defaults. Please provide the default username and password for web access.
Thanks.

The default username is Admin, but the password is blank by default. Somehow, a password was added at some point.
You can try going to the EWS and going to Settings and looking for a password reset option in the Administrator Settings section. If it is there, it will be the only way I know of clearing the password on this particular printer.
↙-----------How do I give Kudos?| How do I mark a post as Solved? ----------------↓

Hiding Username and Password in Web Report URL

Similar Messages

Maybe you are looking for