How to secure a PL/SQL procedure that is called from the web browser

If you have ever seen the sample document management application, and tried to download a file that was stored in the system, you are probably familiar with the apex_util.count_click URL that is used to download the file. If you copy that URL and paste it into a new browser, you will not be prompted to login to download the requested file. I'm using SSO with Apex as a partner application. How can I secure a pl/sql procedure like this to redirect to the login page before beginning the download?
Thanks,
Kris

You can use the second method described here:
http://apex.oracle.com/pls/otn/f?p=31517:15
You would use an application process instead of pasting the procedure call in the browser. In the case I describe, you don't need to grant execute to public on the download procedure.
Denes Kubicek
http://deneskubicek.blogspot.com/
http://www.opal-consulting.de/training
http://apex.oracle.com/pls/otn/f?p=31517:1
-------------------------------------------------------------------

Similar Messages

I am a new iPhone 4s owner. I have a tone in iTunes that I downloaded from the web as a m4r file. Why won't it sync to my iPhone so I can set it as a ringtone.

I am a new iPhone 4s owner. I have a tone in iTunes that I downloaded from the web as a m4r file. Why won't it sync to my iPhone so I can set it as a ringtone?
Lois

Yes, the tone is available and checked in iTunes under the Tones library.
Yes, it is also listed under the Tones tab for my iPhone, but it is grayed out.
Yes, tones are selected under "sources" in General Preferences, along with everything else.
SyncTones was NOT selected under the Tones tab for my iPhone. I did so and it synced.
Thanks for your help!
Lois

Request for preloaded Touchpad bookmark that came preloaded on the web browser

I accidently clicked "Clear Bookmarks" in the Web browser. Could someone please provide me the URL for the Touchpad bookmark that came preloaded on the browser? Thank you!
Post relates to: HP TouchPad (WiFi)
This question was solved.
View Solution.

Thank you so much for this. I contacted 2 tech support "specialists" via chat. Neither one of them could help me out with this after keeping me for over 20 minutes. One of them kept suggesting I do a partial erase, just for that one HP WebOS Touchpad bookmark.
http://img841.imageshack.us/img841/1953/13967832.jpg
http://img405.imageshack.us/img405/9176/32328652.jpg
http://img42.imageshack.us/img42/3291/33171708.jpg
http://img847.imageshack.us/img847/3846/64471939.jpg
http://img692.imageshack.us/img692/7012/64634090x.jpg

How do I re-download a song that i hid from the cloud?

So here's the story:
My wife downloaded some songs from the store directly to her iphone 5, and while they played on our pc just fine, they wouldnt play on her phone. To try and remedy this, I deleted the songs from itunes library, sync'd her phone to remove them from her phones library, then re-downloaded direct to her phone. This worked, except for one, and here's why:
For this one song, I selected "hide from the cloud" when deleting, not knowing the trouble it would cause. When I went to re-download, it doesnt show up in the previous purchases tab. In itunes, it says all purchased songs have been downloaded. When I go to that song in the store to re-buy, it says it has been purchased, and will not let me re-download from there, nor will it let me re-buy it.
This seems like an obvious and substantial glitch in the design. How do I remedy this situation?

You will need to unhide it first : hiding and unhiding.
If you want to do it directly on the phone then on iOS 6 unhiding doesn't work properly - you should be able to see what is hidden and re-download them from that 'hidden' screen, but you can't unhide them so that they re-show in the Purchased tab.

TS3899 How can i delete 3564 old emails that have come from the server on setting up my iphone in 1 easy move

How do I delete 3654 old emails that have been delivered when I started the new iphone?

Log onto the server through your email providers web interface and delete them there.

How to pause, stop, play a sound that is loaded from the other .swf file?

Pause and Resume external SWF sound files
I have this code that plays the sound through linkage. It reside in scene1.fla -> scene1.swf.
var mc:MovieClip = this.createEmptyMovieClip("mc",1);
var myLoop:Sound = new Sound(mc);
myLoop.attachSound("bg_sound");
myLoopVolume=0;
myLoop.setVolume(myLoopVolume);
mc.onEnterFrame = function () {
    if (fadeIn01==1) {
        _root.myLoop.setVolume(myLoopVolume);
        myLoopVolume=myLoopVolume+5;
        if (myLoopVolume>50) {
            fadeIn01=0;
    if (fadeOut01==1) {
        myLoop.setVolume(myLoopVolume);
        myLoopVolume=myLoopVolume-1;
        if (myLoopVolume<5) {
            _root.myLoop.setVolume(10);
           // _root.myLoop.stop("myLoop01");
            fadeOut01=0;
fadeIn01=1;
myLoop.start(0,999);
The problem goes like this. I want to pause the sound from playing in scene1.fla -> scene1.swf in anytime I want, through my main.fla -> main.swf that loads the scene1 movie. I got stuck.

you need to use the path from the timeline that contains the controlling code and myLoop. you can always use trace(this) on both timelines (the one containing the controlling code and the one containing myLoop) to determine the correct path.

Firefox will not open web pages that are called from the mail program that comes with Vista, anyone out there have a solution?

I have installed Firefox ver 4 on a Toshiba laptop running Vista. My problem is when using the mail client that comes with Vista any url in an email message will not load in the browser, a new tab is created and has the url from the mail message but that is as far as I get. There is no revolving icon on the new tab and clicking on reload does nothing. So far this is happening with every website I have tried. There is no error message of any kind. The websites are working sites and can be opened if I navigate to them manually

I have installed Firefox ver 4 on a Toshiba laptop running Vista. My problem is when using the mail client that comes with Vista any url in an email message will not load in the browser, a new tab is created and has the url from the mail message but that is as far as I get. There is no revolving icon on the new tab and clicking on reload does nothing. So far this is happening with every website I have tried. There is no error message of any kind. The websites are working sites and can be opened if I navigate to them manually

How to eliminate an instance of "entering a sequence call" from the teststand report

I am using TestStand 4.2 and I am using a long sequence with several sub-sequences. In these subsequences I am getting test results that I would like to place in the TestStand report. Currently, in order to do this I have to check the "Record Result" option in the "Run Options" of the sequence call properties which displays an "Entering sequence call" mark on the report. Is there any way that I can get rid of this marker and still record information from the sub sequence?
Solved!
Go to Solution.

Hello,
You should have a look a these documents:
http://digital.ni.com/manuals.nsf/websearch/2B14FB1CD4FF25CA862577AE00554FC7
http://zone.ni.com/devzone/cda/tut/p/id/7958
Regards,
Rodéric L
Certified LabVIEW Architect

How do i find music on iphone that is not from the cloud

The list of songs on my iphone is endless, but most of that music is still in the cloud. Is there a way to get the phone to display only the music that is actually physically downloaded onto my phone already? TIA

It sounds like she may be using a different account then the one that was used to purchase 10.8
If you cannot locate the purchase, contact the iTunes Store so they can help you figure out which account it's attached to.
https://www.apple.com/support/itunes/contact/

How i can use isqlPlus DBA and ISQLPlus from the web browser

Hi
thank you for reading my post
how i can use isqlPlus ?
after i instlled Oracle 10gr2 it said that my isql plus is accessable from
http://127.0.0.1:5560/isqlplus
but when i navigate to this url , it asks me for a username and password
i can not connect to it by using : system/system that i use to connect to Enterprise manager.
when i use system/system to connect to sqlPlus it says :
401 Unauthorized
what is username for isqlplus ?
what is its use ?
when we need to use isqlPlus and when we need enterprise manager
where i can find resources for learning isqlplus
Thanks
null

"Well, I think you're referring to my previous post, and yes, my definition was not precise enough, but if you read carefully I specified "where you execute Sql commands", and it was just opposite to EM."
Not sure I caught all that.
Actually, I wasn't responding to your post at all. In 9i, you could not develop PL/SQL within the iSQLPlus interface. You could call procedures and functions, but the DECLARE/BEGIN/END syntax would throw an "unsupported" error. They may have upgraded the feature set in 10g, and if so, then my comment may not apply. I didn't catch which specific version the question was about. My bad. All I was trying to do was point out benefits of each. Picking a tool to use should be based upon your knowledge of each tool and the benefits they provide in acheiving your goal.

How can I use the "EvalScript()" function? I am trying to send text to a Director app from the web browser, but the console in the browser just responds "Uncaught ReferenceError: evalScript is not defined ".

I am trying to control a Shockwave app form another machine, using "Pusher" service (websockets), and everything is ok so far; but when I try to send the shockwave app the text recieved from another machine, using the "EvalScript()" function (as documented), I only get the message "Uncaught ReferenceError: evalScript is not defined" in the browser's console. What am I doing wrong?
'm using the following script in the webpage where the shockwave object is located:
<script type="text/javascript">
    // Enable pusher logging - don't include this in production
    Pusher.log = function(message) {
      if (window.console && window.console.log) {
        window.console.log(message);
    var pusher = new Pusher('abc963cf3e6g678879e');
    var channel = pusher.subscribe('Galileo_channel');
    channel.bind('Galileo_event', function(data) {
      evalScript(data.message);
alert(data.message);
</script>
The "alert" is working fine, but I can't get JavaScript to recognize the EvalScript (I even tried calling the shockwave object, ie: "extev01.evalScript()", since the object's ID is extev01, but it doesn't work, either).
Help!

Thanks Sean.
I tried your suggestion first, using getNetText to poll the server and read a text file. The drawbak is that I had to poll the server constantly, since I could not know in advance when the text file was going to change (and it's not practical to stump the server and connection).
I've kept trying the EvalScript, asigning the Shockwave object to a variable first, then calling the EvalScript() in the object, but it doesn't work, either. I think I will simply use JavaScript and forget about shockwave altogether, since everything is working fine up to that point (although it would be nice to be able to use Lingo for the rest of the app).

How to download pics from n900 web browser?

hai! i want to know that is there any method of saving a pics from the n900 web browser i mean is there any kind of left click so that i can save pics from the web browser! can any one give answer.......?

hold down your pen on the screen on the image you wish to download and it will give you an option to save.
please respont if your problem is solved

How to poll a PL/SQL procedure in BPEL?

Hi,
Normally in BPEL your start your process flows by receiving an event. You can only create a BPEL instance via a Receive or Pick activity. I have a couple of integrations where I have to continually call a PL/SQL procedure and then call another PL/SQL procedure with the output from the first procedure. This is done by invoking 2 partner links and a While activity. I got this working fine. The problem is how to create the instance. At the moment I start the flow by reading in a dummy file with a Receive event. This works for now but if the process has to be restarted it will not work since BPEL know that it has already read the file.
I have tried to start the flow with a receive activity that calls a PL/SQL procedure but I get the error “Operation is not specified” (http://theheat.dk/bpelDb1.jpg). Normally you would use a Invoke activity when calling a PL/SQL procedure, but when I try that I get an error because I don’t have a receive activity first (http://theheat.dk/bpelDb2.jpg)
So basically I need a way to have a receive activity call a PL/SQL procedure.
I have the exact same problem when I need to continually call a Web Service and send the output to a PL/SQL procedure. Here I need an Invoke activity that calls the Web Service and an Invoke that calls the PL/SQL procedure but to get the flow initiated BPEL wants a receive activity.
Regards Pete

I found a simple solution that works but I would like to hear if anybody can see any problems with this approach:
I create a dummy table with one row. I create a partner link that polls the dummy table every 5 minutes. The operation on the table is an update, but the Read value and Unread value are the same!
Every 5 minutes BPEL kicks of a process that calls a PL/SQL procedure etc. There will always be a row in the dummy table and as long as my polling interval is longer than the processing time of the flow I will never have more than one process in-flight at a time. This should ensure that the solution is robust.
Regards Pete
Message was edited by:
Peter Lorenzen
Message was edited by:
Peter Lorenzen

How to secure connection in sql server 2008? my main problem is which certificate should i add in mmc

i'm recently working on hardening of sql server 2008. now i face with a problem. my problem is how to secure connection in sql server 2008? my main problem is which certificate should i add in mmc? what are these certificates about?and guide
me in choosing the appropriate certificate.
and how should i know that the connection in sql server is secured?
plz guide me from the beginning cause i'm rookie in this subject.
thanks in advance.

Hi sqlfan,
Question 1: my problem is how to secure connection in sql server 2008?
Microsoft SQL Server can use Secure Sockets Layer (SSL) to encrypt data that is transmitted across a network between an instance of SQL Server and a client application. For more information about Encrypting Connections to SQL Server, please refer to the following
article:
http://technet.microsoft.com/en-us/library/ms189067(v=sql.105).aspx
Question 2: my main problem is which certificate should i add in mmc? what are these certificates about?and guide me in choosing the appropriate certificate.
To install a certificate in the Windows certificate store of the server computer, you will need to purchase/provision a certificate from a certificate authority first. So please go to a certificate authority to choose the appropriate certificate.
For SQL Server to load a SSL certificate, the certificate must meet the following conditions:
The certificate must be in either the local computer certificate store or the current user certificate store.
The current system time must be after the Valid from property of the certificate and before the Valid to property of the certificate.
The certificate must be meant for server authentication. This requires the Enhanced Key Usage property of the certificate to specify Server Authentication (1.3.6.1.5.5.7.3.1).
The certificate must be created by using the KeySpec option of AT_KEYEXCHANGE. Usually, the certificate's key usage property (KEY_USAGE) will also include key encipherment (CERT_KEY_ENCIPHERMENT_KEY_USAGE).
The Subject property of the certificate must indicate that the common name (CN) is the same as the host name or fully qualified domain name (FQDN) of the server computer. If SQL Server is running on a failover cluster, the common name must match the host
name or FQDN of the virtual server and the certificates must be provisioned on all nodes in the failover cluster.
Question 3: how should i know that the connection in sql server is secured?
If the certificate is configured to be used, and the value of the ForceEncryption option is set to Yes, all data transmitted across a network between SQL Server and the client application will be encrypted using the certificate. For more detail about this,
please refer to Configuring SSL for SQL Server in the following article:
http://technet.microsoft.com/en-us/library/ms189067(v=sql.105).aspx
If you have any question, please feel free to let me know.
Regards,
Donghui Li

How do I run a database procedure that inserts data into a table from withi

How do I run a database procedure that inserts data into a table from within a Crystal report?
I'm using CR 2008 with an Oracle 10i database containing a number of database tables, procedures and packages that provide the data for the reports I'm developing for my department. However, I'd like to know when a particular report is run and by whom. To do this I have created a database table called Report_Log and an associated procedure called prc_Insert_Entry that inserts a new line in the table each time it's called. The procedure has 2 imput parameters (Report_Name & Username), the report name is just text and I'd like the username to be the account name of the person logged onto the PC. How can I call this procedure from within a report when it's run and provide it with the 2 parameters? I know the procedure works, I just can't figure out how to call it from with a report.
I'd be grateful for any help.
Colin

Hi Colin,
Just so I'm clear about what you want:
You have a Stored procedure in your report. When the report runs, you want that same procedure to write to a table called Report_Log.
If this is what you want the simple answer is cannot be done. Crystal's fundamental prupose is to read only, not write. That being said, there are ways around this.
One way is to have a trigger in your database that updates the Report_Log table when the Stored Procedure is executed. This would be the most efficient.
The other way would be to have an application run the report and manage the entry.
Good luck,
Brian

How to secure a PL/SQL procedure that is called from the web browser

Similar Messages

Maybe you are looking for