How to prevent Web Accelerators...

I am trying to prevent a client side / ISP from caching pages from Plumtree Portal. I was doing some reading and found that some "Web Accelerators" ignore the pragma-no cache etc. Has anyone run into this, we have some sensitive data that may be cached by these "Web Accelerators".

Hi Carolus,
I would check out this article: http://www.mnot.net/cache_docs from one of the top dogs at BEA on caching.
Then I would implement a PEI (perhaps IPageActions.OnPageFinish) to make sure the appropriate headers are added to every page that Plumtree generates.
From my interpretation of the article, I would say that the appropriate headers to disable caching completely would be:
Pragma: no-cache
Cache-Control: no-cache, no-store
Expires: <today's date/time minus 1 year>
Hope this helps,
Chris Bucchere | bdg | [email protected] | www.bdg-online.com
Like blogs? Like Plumtree? Check out http://bdg-plumtree.blogspot.com.

Similar Messages

  • How to prevent duplicate web pages loading

    when clicking on a link, two duplicate web pages load, how to prevent this

    This started when you installed Firefox 13? Which version did you have before -- Firefox 12 or Firefox 3.6?
    Does this occur on all sites or only on particular sites?
    Do you have a very sensitive mouse or touchpad that might be double-clicking the link?

  • How to prevent duplicate web pages from loading

    <blockquote>Locking duplicate thread.<br>
    Please continue here: [[/questions/930219]]</blockquote>
    how to prevent duplicate web pages from loading

    <s>Hi berternie, can you describe this in more detail?
    Are you saying the identical page loads in two different tabs? When does that happen -- when you click a link? or when you use a bookmark?
    Or do you have multiple tabs open every time you see your home page (i.e., when you start up, open a new window, or click the home icon)?</s>
    I see, you have more info in this thread: https://support.mozilla.org/en-US/questions/930219

  • How to prevent user or group to use 3-tier WebI and DeskI in XI 3.1

    How to prevent user or group to use 3-tier WebI and DeskI in XI 3.1
    This function is enable in BOE 6.5 by using Supervisor.

    Hi,
    You can explicitly deny access to these applications from the CMC in BOE 3.1. Open the CMC, click on BusinessObjects Enterprise Application and then select the WebI.
    From the right hand side click on the 'Net Access' section for that group and disable the 'Log on to Web-Intelligence and view this object in CMC.'
    This will prevent the option of the WebI for that group.
    I hope this helps you.
    Regards,
    Prashant

  • How to prevent automatic download and install of Reader 8.1.2

    Hi-
    I have Adobe Reader 7.0.9 and I need to keep it as my default Adobe reader program and plug-in for some applications that I use.
    Over the last week, Adobe reader 8.1.2 downloads automatically and installs itself in my business laptop (Win XP SP2) and replaces my 7.0.9 version.
    Each time I uninstall the 8.1.2 and reinstall the 7.0.9. I ensure the option of automatic download and install is disabled in 7.0.9.
    But it still happens I have for the xth time today the new 8.1.2 in my laptop.
    Anybody knows what is going on ? And how can I solve this issue to keep my 7.0.9 version ?
    Thanks.

    radellaf wrote:
    This nonsense is happening right now on my iPhone.  2.3GB deleted, now iOS 8 is downloading without my consent.
    That's *not* a good thing to hear.
    After the download finishes, do NOT press the Install Now button. Try the following to remove the download from the device. Here's the procedure I came up with last time this happened with iOS 7...It may or may not work.
    Re: Apple Forced iOS7 update on my iPad2 !
    Afterwards if you succeed, block Apple's update server using the following method so it wont get pushed to the device again:
    In your router's settings, set up a block (using Access Restrictions or similar in the router's web interface) to mesu.apple.com. This will prevent the devices from "phoning home" to Apple, checking for the update and getting the download pushed to it again.
    Or follow the instructions at this link:
    http://ios8tips.com/how-to-prevent-automatic-update-to-ios-8/

  • FTP dictionary attack - how to prevent ?

    I'm already searched the board but haven't found a solution for our problem:
    During the last weeks the server was being hit by attacks looking like a dictionary attack. Someone tries to log in by ftp thousands of times. This made the server to reboot and finally destroying its mail database, which I rebuilt.
    My biggest problem however is how to prevent this in the future ? Unfortunately the server is used by a nonprofit organization, so we can't spend thousands for intrusion prevention firewall hardware.
    But isn't there a way to configure something like "Each IP is allowed to try logging in via ftp only X number of times per hour" for the ftp service ? I think this would help us.
    I already set to close connections after one wrong password try using Server Admin. By default it was set to "3". But guess that this doesn't really help.
    Any idea would be appreciated.

    No, the people here are used to access the server by ftp and I can't do much. Unfortunately.
    There are alternatives that are (usually) easier to use than ftp. (In my experience, most end-users aren't running a shell-level ftp command, they're running some sort of a front-end or GUI-based ftp client. Finder, perhaps. Which means most don't know they're even running ftp, in any real sense.)
    Also aren't most CMS more vulnerable to DoS attacks and intrusion attempts ? It's complex software with lots of security holes.
    Valid concerns, certainly.
    You do realize that ftp transmits the username and password credentials in cleartext, right?
    Anybody that peeves somebody else sufficiently can end up getting hit with a DoS or (worse) a DDoS or a dictionary attack. Sometimes, you don't even need to peeve somebody. I've dealt with a case of a user launching a DoS to get a tactical advantage over another user in an online game, too.
    Yes, CMS installations can be vulnerable; pick wisely, and stay current. An administrator need do the same thing with a CMS as with most anything else web-facing; evaluate security carefully, track updates and security notices and generally keep a lid on the riff-raff.
    But if you have a situation where you can use, for instance, certificate-based access, you can block most of the trouble and you can block typical open access.
    I find http://www.aczoom.com/cms/blockhosts being an interesting thing. However it's from 2005 - is it still actual or outdated ?
    I tend to either run fairly locked down with the web server and fairly defensive around, or (where applicable) use mod_security, or both.
    And a typical recommendation is to use an out-board firewall, and to house your address-based defenses and blacklists out there. Having users "loose" on the firewall (and I include myself in that) means that a mistake or a configuration change on the server can potentially open up an exposure. I much prefer to have the extra step of connecting to the firewall.
    A VPN server can also be housed out on a firewall (or host-based, if you're so inclined), which can allow you to run ftp and other protocols more securely.
    I do block some IP subnets. But the attacks I (still) see are from all over the IPv4 address space.

  • How to Resize Web Gallery Slideshow

    I uploaded some photos of my wifes Xmas party
    http://gallery.mac.com/kjritchie#100068&bgcolor=black
    I elected just to allow viewing, no downloading. My understanding is each photo upload is 800x600. How do I prevent Web Gallery slideshow displaying these photos in full screen mode? 800x600 expanded to fill a 20" monitor looks bad.
    Kelvin

    Kelvin:
    You can't. The software that generates the gallery and slideshow is server side and there are no files to edit to change the size. I suppose you could mount the iDisk, locate the gallery folder in the Web/Sites/_gallery folder and replace the 800 x 600 file with a full sized version. However, each photo has it's own folder and several different image files and they are not the same file name as what you have in the iPhoto library. The file used for the slideshow is named web.jpg. So you'll have to rename each file web.jpg and put it in the folder for that photo.
    Happy Holidays
    TIP: For insurance against the iPhoto database corruption that many users have experienced I recommend making a backup copy of the Library6.iPhoto database file and keep it current. If problems crop up where iPhoto suddenly can't see any photos or thinks there are no photos in the library, replacing the working Library6.iPhoto file with the backup will often get the library back. By keeping it current I mean backup after each import and/or any serious editing or work on books, slideshows, calendars, cards, etc. That insures that if a problem pops up and you do need to replace the database file, you'll retain all those efforts. It doesn't take long to make the backup and it's good insurance.
    I've created an Automator workflow application (requires Tiger), iPhoto dB File Backup, that will copy the selected Library6.iPhoto file from your iPhoto Library folder to the Pictures folder, replacing any previous version of it. It's compatible with iPhoto 08 libraries and Leopard. iPhoto does not have to be closed to run the application, just idle. You can download it at Toad's Cellar. Be sure to read the Read Me pdf file.

  • How to prevent .DS_Store files in specificied folders

    Hello.  I want to stop creation of .DS_Store files in Desktop and Picture/hoge folders only. Also I would like to keep its settings of .DS_Store files in other folders.  When I googled the web I found so many pages explaining how to prevent .DS_Store in network folders, how to stop creation of .DS_Store files in all of the OSX system and usage of TotalFinder. Those are not what I am finding for. I want to stop creation of .DS_Store files in only particular folders.  I can use AppleScript or Terminal commands.  Thank you very much.

    would creating an empty one, then locking it achieve what you need ?
    + locking existing ones as needed.
    briefly checking here causes no obvious problems, Finder still alows changes, but reverted after relaunch.

  • How Logon to Web AS

    HI,
    I have installed SAP R/3 4.7.
    and trying to develop some BSP's. While running its asking some username and password. I gave R/3 logon details, but showing 500 Internal Server Error details..
    How to logon Web AS? ANy tranaction codes  aval for Web AS (Admin) in R/3
    Thanks
    J

    Hi,
    Check this about default users if you want to prevent being asked for a user:
    http://help.sap.com/saphelp_nw2004s/helpdata/en/02/4b52922a8d11d5991f00508b6b8b11/frameset.htm
    Eddy
    PS.
    Put yourself on the SDN world map (http://sdn.idizaai.be/sdn_world/sdn_world.html) and earn 25 points.
    Spread the wor(l)d!

  • How to prevent adds to appear in firefox

    In addition to the actual web page content, I always see unwanted content is displayed. Every page is intervened and at number of places on a web page the unwanted content is inserted. How to prevent this?

    hello, maybe you have adware present on your computer. please try these steps:
    # [[Reset Firefox – easily fix most problems|reset firefox]] (this will keep your bookmarks and passwords)
    # afterwards go to firefox > addons > extensions and in case there are still extensions listed there, disable them.
    # finally run a full scan of your system with different security tools like the [http://www.malwarebytes.org/products/malwarebytes_free free version of malwarebytes] and [http://www.bleepingcomputer.com/download/adwcleaner/ adwcleaner] to make sure that adware isn't present in other places of your system as well.
    [[Troubleshoot Firefox issues caused by malware]]

  • How to integrate web based application to windows based application

    Hi,
    Experts,
    we developed web based application in this when we raising
    invoice document after adding this we need to updated Amount
    in integratee SAP B1 then that Amount we need Update The
    Amount  in OACT Table  how we can Update in Amount Field
    in OACT Particular Account Code. plz Guide  me. and how to
    integrate web absed application to windowbased application
    plz help me.
    Regds,
    Samapth.

    Dear sampathdevunuri kumar,
    You may develop the addon based on SDK DIServer for required function.
    The DI Server is an extension of the DI API and supports all its objects. It is intended for high-volume data integration, where numerous client connections must be managed simultaneously and optimized for speed. It is also suitable where Web-services architecture is preferred.
    Please refer to SDK help and SDK DIServer sample for more information.
    Best Regards
    Jane Jing
    SAP Business One Forums team

  • How to debug web app with weblogic?

    I wrote a web app that includes jsp files and some javabeans, then I put the jsp files to directory
    mydomain\applications\DefaultWebApp
    then I complied javabeans and put those classes to
    mydomain\applications\DefaultWebApp\WEB-INF\classes
    Then I start the weblogic,it runs very well.
    I modified some javabean, complie them and put classes override the old classes,
    but the web app can not find the new classes.
    Any one know How to debug web app(with javabeans) in weblogic?
    thanks!

    how to config the hot deploy?
    thxSorry, for this delay in responding. I had set notify me with email option in Watch This topic; but I never did get any email notification.
    I use wls6.1; I think the process may be very similar to this in wls8.x. In wls6.1 (sp5), this is done via the -
    Dweblogic.ProductionModeEnabled=False or
    Dweblogic.ProductionModeEnabled=True
    in the startup cmd/sh script. Out of the box, wls6.1 is set to Dweblogic.ProductionModeEnabled=False which automatically enables hot deploys.

  • How to put web app to Oracle 8i Jserver ?

    I've developed a web app with JDev3.1 , Oracle8i 8.1.6 on NTServer4.0.
    and want to put it on Oracle Jserver 8.1.6:
    The app works well within JDev3.1.
    I depolyed my Business Components project and test well.
    I would like to know how to put web app to Jserver. Is it possible?

    when you say "web app" i am assuming you mean an applet, servlet or java server page(jsp) ??
    if you mean this, then you need to move to the rdbms 8.1.7 environment for this support.
    rdbms 8.1.7 supports servlets and jsp's in two different ways :
    externally -- on the rdbms 8.1.7 platform
    they can be run in an external apache front end included with the 8.1.7 rdbms.
    internally -- inside the rdbms 8.1.7
    they can be deployed internally to 8.1.7 in the "oracle servlet engine" (ose)
    applets and html static pages still need to be deployed to a web server on the mid-tier OR the external apache front end included with the 8.1.7 rdbms to optimize performance.
    i hope this helps ...
    p.s. if i've misunderstood your question , please restate it.
    null

  • How a J2EE web application access CR reports stored on the CR Server XI?

    Hi,
    I'll be working on some crystal report templates that will eventually be hosted/publish on the CR Server XI.
    My questions are:
    1. How my J2EE web application access those reports?
    2. Do my web application uses some CR API for the connectivity and integration?
    3. What will happen to the database connectivity of the report template? since the report are created locally.
    4. Can the report template be edited/updated on the server?
    5. How the CR XI login functionality be involve in the integration (web application ---> CR Server XI)?
    6. Is the J2EE web application be deployed on similar web/application server where the CR Server XI resides?
    7. What is the role of RAS, Universe, Business View Manager to this whole CR integration?
    I hope you can provide some guidance on this journey to Crystal Report world
    Regards,
    Rulix Batistil
    Genesis Networks Pte Ltd
    www.gen-net.com.sg

    1) Your application connects via the Java SDK using the appropriate JAR files.
    2) It can.  You can set the database information at runtime or use the already populated information from Enterprise.
    3) Same as 2.   Typically when you save the report to Enterprise you set up the database information there so that it runs against the database you want without prompting.  You can change this via code to hit whatever equivalent database you want.
    4) Yes.  You would have to use RAS and the RCAPI to accomplish this via code.  You can also make changes in the designer and overwrite the existing report template.
    5) You will log in via code. The information on how to do so is in the SDK documentation, which I will link.
    6) It can be deployed to the same machine as CR Server, though we recommend against that.  Typically you will want to deploy it to a seperate web server and allow it to connect to the CR Server across the network.
    7) RAS can be used to run reports, as well as the page server.  The universe and business view manager are not directly used in code.  If a report runs against a universe or business view then it will use them for data, but you wouldnt do anything with them directly.
    [BOE Developer Library|http://devlibrary.businessobjects.com/BusinessObjectsXIR2SP2/en/devsuite.htm]
    You will find the Java SDK information under the BusinessObjects Enterprise SDK section.
    Best Regards,
    Jason

  • How to prevent an error of [WIP work order ... is locked-]

    Hello experts
    Can someone tell me how to prevent an error which [The WIP work order associated with this transaction is currently locked and being updated by another user.  Please wait for a few seconds and try again.Transaction processor error].
    How can you prevent that error?
    P.S.
    Oracle support　told me [When you make data of mtl_transaction_interface, give same transaction_header_id to all data. Then, you kick worker with appointed transaction_header_id. Or, you set up being uncompatible with workers].
    I cannot allow that making with same transaction_header_id and being uncompatible with worker on my system.

    Hi santosh,
    You can implement badi BBP_DOC_CHECK to check vendor email and issue error message.
    Kind regards,
    Yann

Maybe you are looking for