No session id in URL ?
I constructed a URL with the app id, page id, etc. substitution strings like the following:
f?p=&APP_ID:5:::::
and notice that I don't include the session id subsitution variable. When I click on the link, HTMLDB renders the page correctly but I noticed that it in the address bar, the URL contains a session id. I noticed on asktom.oracle.com, the "GOTO a Bookmarkable Page" links don't behave this way. How do I prevent the session id from showing up in the address bar?
Thanks in advance!
Jes,
The home page attribute is used when you run an application and don't specify a page ID in the URL, or when you use the Builder's run icon for the app. In those cases, if the home link contained the login page as the page ID, the engine would redirect to the login page. If the home page is not the login page the engine would redirect to the home page and then, if that page required authentication, it would immediately show the login page (without a redirect). Then after authentication, the after-login page is redirected to according to the authentication scheme's logic.
So in that situation, doing what you said is a slightly more direct way of getting to the login page. However, an advantage of specifiying the real home page in the home page attribute is that if you change authentication methods from one that uses a login page to single sign-on, you don't have to remember to change the home page attribute. As well, if the home page does not require authentication (is public), there is no redirect to the login page when the home page attribute is used.
Scott
Similar Messages
-
Problem passing Session variable as URL parameter?
Hi,
I am trying to create a multiple page entry form using
coldfusion session. But I am having some problem when passing the
session variable to url parameter. For test purpose I have created
the following code:
<cfif Not IsDefined("SESSION.AE")>
<!--- If structure undefined, create/initialize it
--->
<cfset SESSION.AE = StructNew()>
<!--- Represent current form srep; start at one --->
<cfset SESSION.AE.StepNum = 1>
</cfif>
<cfif IsDefined("Form.GoBack")>
<cfset SESSION.AE.StepNum = #url.StepNum# - 1>
<cfelseif IsDefined("Form.Next")>
<cfset SESSION.AE.StepNum = #url.StepNum# + 1>
</cfif>
<html>
<head>
<title>Untitled Document</title>
<meta http-equiv="Content-Type" content="text/html;
charset=iso-8859-1">
</head>
<body>
<form method="post"
action="/AE/try.cfm?StepNum=#SESSION.AE.StepNum#">
<input type="submit" name="GoBack" value="Back">
<input type="submit" name="Next" value="Next">
</form>
</body>
</html>
When run it I get the following error:
The value "" cannot be converted to a number
The error occurred in C:\CFusionMX\wwwroot\AE\try.cfm: line
11
9 : <cfset SESSION.AE.StepNum = #url.StepNum# - 1>
10 : <cfelseif IsDefined("Form.Next")>
11 : <cfset SESSION.AE.StepNum = #url.StepNum# + 1>
12 : <!---<cfset SESSION.AE.StepNum = #url.StepNum# +
1>--->
13 : </cfif>
I couldn't figure out where is the problem. Any help is
really appreciated.
Thanks in advance.You are mixing up your gets and posts aren't you?
You have your form method set to post which creates form
variables not
url variables. So when you try to use the url variable to set
your
session it does not exist.
Change your SESSION.AE.StepNum = #url.StepNum# to
Session.AE.StepNum =
form.StepNum, note there is no need for the #'s.
OR
change your form method="post" to form method="get"
Nagelia wrote:
> Hi,
>
> I am trying to create a multiple page entry form using
coldfusion session. But
> I am having some problem when passing the session
counter to url parameter. For
> test purpose I have created the following code:
>
> <cfif Not IsDefined("SESSION.AE")>
> <!--- If structure undefined, create/initialize it
--->
> <cfset SESSION.AE = StructNew()>
> <!--- Represent current form srep; start at one
--->
> <cfset SESSION.AE.StepNum = 1>
> </cfif>
> <cfif IsDefined("Form.GoBack")>
> <cfset SESSION.AE.StepNum = #url.StepNum# - 1>
> <cfelseif IsDefined("Form.Next")>
> <cfset SESSION.AE.StepNum = #url.StepNum# + 1>
> </cfif>
>
> <html>
> <head>
> <title>Untitled Document</title>
> <meta http-equiv="Content-Type" content="text/html;
charset=iso-8859-1">
> </head>
> <body>
> <form method="post"
action="/AE/try.cfm?StepNum=#SESSION.AE.StepNum#">
> <input type="submit" name="GoBack" value="Back">
> <input type="submit" name="Next" value="Next">
> </form>
> </body>
> </html>
>
> When run it I get the following error:
>
> The value "" cannot be converted to a number
>
>
> The error occurred in C:\CFusionMX\wwwroot\AE\try.cfm:
line 11
>
> 9 : <cfset SESSION.AE.StepNum = #url.StepNum# - 1>
> 10 : <cfelseif IsDefined("Form.Next")>
> 11 : <cfset SESSION.AE.StepNum = #url.StepNum# +
1>
> 12 : <!---<cfset SESSION.AE.StepNum =
#url.StepNum# + 1>--->
> 13 : </cfif>
>
> I couldn't figure out where is the problem. Any help is
really appreciated.
>
> Thanks in advance.
>
>
>
> -
Session ID in URL - Why ?
I may have read it somewhere but forgot...
HTML DB reads the session cookie on every single request, correct ?
So why is Session ID in URL necessary really ??? since that value is already in the cookie.ah,
Scott explained it here
Why is SESSION used in the URL? -
Is it possible to pass nQuireID (session ID) via URL ?
is it possible to pass nQuireID (session ID) via URL?
(how to get the session id ?)
therefore, we dont need to pass the userid and password. (embedded in the URL)Ummm you can't get a session ID unless you login first, chicken and egg problem? Have you looked at implementing SSO? That's the proper way of solving integration issues, hard-coding the user ID and the password on the URL is a nasty and insecure "hack"...
-
Alternatives for HTTP Session(Cookies or URL Reqriting)
Sir/Madam,
Actually we can handle session using (1) URL rewriting and (2) Cookies , apart from this is there any way to handle sessions ? If so what are they ?.
Thanks and Regards
- Raja.Of course... You could use (1) Cookies and (2) URL rewriting, as an alternative.
Or you could write your own JSP/servlet engine and require all pages to be forms that have the session ID in them or whatever other custom hair-brained idea you wanted. -
Page 404 Error when passing Session values through URL
The current application I'm working on is a 'Targeted Email Communications' application. Bascially, employees at the school at which I'm employed can go in and select services to recieve outage notification emails on.
The problem I'm discussing in this post has to do with our so called 'Notification Summary Screen.' This screen is basically a report region which displays all outage notifications issued by this application. In the left-most column of this report, I have an edit button that when clicked, redirects the user to the 'Create / Update / Send Screen' with the primary key values passed through the URL. When this happens, all other page items query their values based on the NOTIF_ID passed in through the URL. All of this works fine.
The problem is, on the Notification Summary Screen, I also have a button labeled 'Create a new notification.' This button redirects the user to the same page as before, except now all of the values are NULL because this outage notification has not yet been created. The problem is, when I try and do this - I get a page 404 not found error. I'm pretty sure it's because my application is getting confused because earlier all of the values were passed in through a URL. For the 'Create New' button, I clear the page cache for this page - and it still does nothing. I am at a loss for what to do here because I keep getting the error.
Here's the code for the URL button found in the report query in the 'Notification Summary Screen' :
('<a href='
|| 'f?p=&APP_ID.:2:&SESSION.::&DEBUG.::'
|| 'P2_NOTIF_ID,P2_NOTIF_SEQ,P2_INFO_TYPE:'
|| a.notif_id ||','|| b.notif_seq || ',' || 'Update'
|| '>'
|| '<img src="#APP_IMAGES#EditButton.gif" />'
|| '</a>') as "edit",** NOTE, I took out the double quotes after href and before the closing right karat brackets because for some reason the code in the URL wouldn't display...weird.... **
The NOTIF_ID value is the primary key identifier for each outage notification. Additionally, the NOTIF_SEQ value is the sequence number for each (because each notification could have multiple updates). The INFO_TYPE value just references whether this is 'Initial', 'Updated', or 'Closing' information.
Any suggestions would be much appreciated.
Eric
Edited by: user11685190 on Nov 6, 2009 1:12 PM
Edited by: user11685190 on Nov 6, 2009 1:13 PM
Edited by: user11685190 on Nov 6, 2009 1:14 PMHey you guys,
Thanks for your responses. I actually just started working for this academic institution, and have to finish a probationary period before I have access to their VPN (5 Months). Therefore, I cannot access my workspace, nor will they allow me to export my application because it's considered their intellectual property. I believe it may be the &DEBUG portion of it.
Though I cannot state the exact URL the error states, I can tell you that if I go into application builder to the page in question and try and run it before the page that links to it, I get the error. However, when I use the link everything works fine. When I use the 'Create New' button to link to the page with no values passed, I get the error again. I work again on Monday and will have more information then.
Thanks again!
Eric -
Session management in URL reporting
Hi,
I have problems with the session management while calling reports from our own web-app.
We host our reports (.rpt) on a CrystalReportsServer 2008 running on a Tomcat. This CRS is configured with 20 CAL (ConcurrentAccess Licences).
On the other side, our Intranet, running on another Tomcat.
Our Intranet provides UI allowing users to determine the parameters that will be passed to reports. For some reasons we do not want to use InfoView now but keep using our own UI to call reports. The idea was then to call them through OpenDocument (or viewrpt.cwr) passing parameters in the URL.
In our Web-app, I authenticate the user to the CRS, retrieving an IEnterpriseSession. I then get a token for my calls to OpenDoc. But then, each time I call OpenDoc, a new CAL is picked out. Even if I logoff, only one CAL (the one belonging to my IEnterpriseSession) is given back.
As our users often open and close lots of reports, we run very quickly out of CAL, although the reports are now closed and the user gone.
I thought using a token would have allowed us to consume only 1 CAL per user, using the same CAL for the different calls.
Is my reasoning wrong or is it my code..?When creating the token , use "CreateWCAtoken" function this will not increse the session count in CRS.
You might be using CreateLogonToken function
Arguments passed to these two functions are same. -
Force passing session id in url
Hello. I need to pass session id (jsessionid) in only url, not in cookies even if cookies are on (accepted). Is it possible?
I use jboss and struts. Is there any option in xml files?ah,
Scott explained it here
Why is SESSION used in the URL? -
Session Timeout and Url Redirect in BlazeDS?
We have a JSF2 Webapp and Flex 4 integreated.
Question
1. How can we pass the parameters in web.xml to make FLEX4 redirect to login page when the session timeouts instead of giving a AMF Communication Error?
Thanks,
User.hi, i am also struggling with the same problem, have you got any solution
-
Use SESSION variable in URL from HTML region
Hello,
I have what looks like a simple question but i've been struggling with it for three days now, and i need your help!
I have a page, with an HTML region. I want to display some links to other pages within the application, so i thought i'd use this:
a href="http://server.xxxx.com:7777/pls/htmldb/f?p=114:13:&SESSION"
But the session ID is not interpreted, and the link doesn;t work. Any idea what's wrong here? or how i should create links with the session id in it?
Thanks!!!! Matt
Message was edited by:
matt_amsterdamMatt,
You've missed off the period (.) off the end, use &SESSION. instead -
Suppress the session data in URL display
we have afrLoop=401202924205955&afrWindowMode=0&_adf.ctrl-state=zpx91q8vg_4 appended to the url
http://host1.example.com/sbat_int/faces/Main.jspx?_afrLoop=401202924205955&_afrWindowMode=0&_adf.ctrl-state=zpx91q8vg_4
We want to show only this part:
http://host1.example.com/sbat_int/faces/Main.jspx
in the browser window
where should the changes be made?
Thanks
PrashanthPrashanth,
These are used to maintain the state of the application (request etc). Any specific reason why do you want to remove them? As John mentioned, you cannot remove them.
-Arun -
In my site URLs I have CFID and CFTOKEN (and jsessionid in
CF8) in my URL. Is there any way to get those to NOT show up?
Thanks!They're probably showing up because you have a
<CFLOCATION> tag without the addtoken="no" attribute in your
code somewhere. Start with that. Also check your code for the use
of the URLSessionFormat() function which will pass those through
the URL. -
How to pass session variable value with GO URL to override session value
Hi Gurus,
We have below requirement.Please help us at the earliest.
How to pass session variable value with GO URL to override session value. ( It is not working after making changes to authentication xml file session init block creation as explained by oracle (Bug No14372679 : which they claim it is fixed in 1.7 version Ref No :Bug 14372679 : REQUEST VARIABLE NOT OVERRIDING SESSION VARIABLE RUNNING THRU A GO URL )
Please provide step by step solution.No vague answers.
I followed below steps mentioned.
RPD:
****-> Created a session variable called STATUS
-> Create Session Init block called Init_Status with SQL
select 'ACTIVE' from dual;
-> Assigned the session variable STATUS to Init block Init_Status
authenticationschemas.xml:
Added
<RequestVariable source="url" type="informational"
nameInSource="RE_CODE" biVariableName="NQ_SESSION.STATUS"/>
Report
Edit column "Contract Status" and added session variable as
VALUEOF(NQ_SESSION.STATUS)
URL:
http://localhost:9704/analytics/saw.dll?PortalGo&Action=prompt&path=%2Fshared%2FQAV%2FTest_Report_By%20Contract%20Status&RE_CODE='EXPIRED'
Issue:
When I run the URL above with parameter EXPIRED, the report still shows for ACTIVE only. The URL is not making any difference with report.
Report is picking the default value from RPD session variable init query.
could you please let me know if I am missing something.Hi,
Check those links might help you.
Integrating Oracle OBIEE Content using GO URL
How to set session variables using url variables | OBIEE Blog
OBIEE 10G - How to set a request/session variable using the Saw Url (Go/Dashboard) | GerardNico.com (BI, OBIEE, O…
Thanks,
Satya -
I want to use interaction between two reports in different dashboards, which do not share the same tables but the same values.
When clicking on column A values in Report A, I want to create action link with option to open Report B, presenting column B, which is filtered by value A.
I also want the prompts in Report B to present the value A, as it was selected by the user on Report A.
I thought about using GOURL in action link to specific URL. I manage to open Report B, but it is not filtered by A.
How can I transfer the value A in the URL? how should I add the value A into '&val1=XXX'?
I also want to transfer other prompt values (e.g. val2 of col2) from A to B. I set this prompt value to session variable, but how can I add it in the GOURL syntax of '&val2=XXX'?Hi,
Check those links might help you.
Integrating Oracle OBIEE Content using GO URL
How to set session variables using url variables | OBIEE Blog
OBIEE 10G - How to set a request/session variable using the Saw Url (Go/Dashboard) | GerardNico.com (BI, OBIEE, O…
Thanks,
Satya -
Service URL not found:session
Hi,
I had written a custom authentication module according to the sample given with SunONE doc. But, when I try to login to the portal server, it is throwing the following exception in /opt/SUNWam/debug/amSSOProvider file.
how to solve this issue:
I am using SunONE portal server 6.1
05/13/2004 07:22:54:260 PM GMT+05:30: Thread[Thread-157,5,main]
could not create SSOToken from HttpRequest
com.iplanet.dpro.session.SessionException: Service URL not found:session
at com.iplanet.dpro.session.Session.getSessionServiceURL(Session.java:336)
at com.iplanet.dpro.session.Session.getSessionServiceURL(Session.java:316)
at com.iplanet.dpro.session.Session.getSession(Session.java:233)
at com.iplanet.sso.providers.dpro.SSOProviderImpl.createSSOToken(SSOProviderImpl.java:56)
at com.iplanet.sso.SSOTokenManager.createSSOToken(SSOTokenManager.java:226)
at com.sun.portal.desktop.context.DSAMESessionAppContext.getSSOToken(DSAMESessionAppContext.java:67)
at com.sun.portal.desktop.context.DSAMESessionAppContext.getSessionID(DSAMESessionAppContext.java:99)
at com.sun.portal.desktop.context.PSDesktopAppContext.getSessionID(PSDesktopAppContext.java:725)
at com.sun.portal.desktop.context.PSDesktopContextFactory.getDesktopContext(PSDesktopContextFactory.java:91)
at com.sun.portal.desktop.DesktopServlet.getDesktopContext(DesktopServlet.java:384)
at com.sun.portal.desktop.DesktopServlet.doGetPost(DesktopServlet.java:413)
at com.sun.portal.desktop.DesktopServlet.service(DesktopServlet.java:303)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
at com.iplanet.server.http.servlet.NSServletRunner.invokeServletService(NSServletRunner.java:897)
at com.iplanet.server.http.servlet.WebApplication.service(WebApplication.java:1065)
at com.iplanet.server.http.servlet.NSServletRunner.ServiceWebApp(NSServletRunner.java:959)seems like you have cookie encode problem,
based on your
container you need to set the following property in AMConfig.properties
in general for welogic and web sphere contianers you need to set it to true
com.iplanet.am.cookie.encode
Maybe you are looking for
-
Windows home server 2011 Backup with PC Windows 8 Pro - Backup failed (Unsuccessful)
On the PC under Windows 8 Pro, Event message: Backup job 1 on HCGSERVER did not succeed. Reason: ClientVssProblem, System.String[] Windows Operating System; Version: 6.1.8800.16385; ID: 514; On the Server, following message:An error prevented backu
-
Erratic trackpad when ethernet plugged in
Hi, I've got a brand new MBP 15" with a trackpad that works perfectly while on wireless. However, as soon as I plug in an ethernet cable - even when the network is not being used - the trackpad immediately becomes erratic and unusable. As soon as I u
-
What authorizations for Information Broadcasting are required?
Hello experts, this is a scenario which has recently arisen. We have the BEx Broadcaster properly configured for e-mail broadcasting at least. Users need to be able to use the Broadcaster, in particular the e-mail function for WAD reports. However, w
-
How to Design Custom Presentation Folders in Adobe Illustrator
Any expert can give me idea to design presentation folder in adobe illustrator in CS5. or let me know very low cost ( Affordable ) design service. Thanks
-
How to view performance in Oracle10gAS Portal
hi to all I need your help out there. Do anyone noe how to view all the performance logs in Oracle10gAS Portal? It means in Oracle10gAS how can i see all the no. of hit counter for per page, the most popular website/portlet at the end of the day, por