PHP, Oracle and Security

I am a systems Administrator who's company has cotnracted out to a web developer to design a website for our cutomers to purchase our products and have a page that sugggests new products that might be interested in. We run an Oracle DB and build our own in house applicatiosn for access to this Oracle DB using .NET. We currently have our own application service that is built in .NET that allows our current website built in .NET to only access certain calls for data from Oracle for security purposes. Our website resides in our DMZ and our DB rsides in our LAN. What is the best pracitce without putting an Oracle client on the webserver for PHP to talk to Oracle? They want us to do a massive extract of user data onto the webserver to a mysql DB using SOAP. Which seems to me to be even less secure than what we have now. Thanks for your help.

To use one of the DB extensions, PHP needs access to local DB
libraries such as Oracle Instant Client or the MySQL client (or PHP's
inbuilt MySQL access code in the mysqlnd extension). This is
equivalent to needing ODP.NET.
What kinds of "calls" are you restricting in .NET? Because PHP is
open source, you could modify the OCI8 extension to restrict certain
statements or operations. But using DB-side access control seems a
better way to go, perhaps in conjunction with stored procedures.
The web company is probably more familiar with MySQL, but duplicating
data from Oracle will expose more "surface area" for hackers and
require two DB skill sets to secure and maintain.
Make sure the web company uses bind variables - even with MySQL - to
help prevent SQL Injection problems.
An alternative could be for PHP to access the DB via web services
http://download.oracle.com/docs/cd/E11882_01/appdev.112/e10492/xdb_web_services.htm#CHDDBCHB

Similar Messages

Role based oracle adf security and filtering data

while oracle adf security looks great its only role based... does anyone know of any resources describing an architecture where this is used in addition to filtering of data based on say, organization?
it seems that oracle adf security is not really geared towards a self service app where administrative users have a security interface as part of the application where they can assign roles and associate users to entities for the further filtering of data...

Hi,
it seems that oracle adf security is not really geared towards a self service app where administrative users have a security interface as part of the application where they can assign roles and associate users to entities for the further filtering of data...
ADF Security is a JAAS based security implementation to protect resources (like entities). It is nota security provider like OPSS or OID which you can use for user provisioning and self service (if you code against the IDM APIs). ADF Security only checks for whether a user is authenticated and if the user has the permission to perform a task.
However, you can use groovy to access the security context from Groovy, which allows you to add the authenticated username to a query - for example to filter recrds out that match the username in one of its attributes.
For example, you could create a ViewCriteria that for example filters the query by a specific attribute. Say that managers can see data starting from department 10 whereas employees can see data starting from department 100. The ViewCriteria would reference a bind variable with the following default setting
adf.context.securityContext.isUserInRole('manager')? 10 : 100
Frank

Advance Replication and Oracle Label Security

Has anyone been able to configure both Advance Replication and Oracle Label Security to work together?

This is currently not supported in Streams. I have an enhancement request in with Oracle for this functionality. This won't be seen in 11g R2 either.
Has anyone done Label Security with Advance Replication?

Enterpise User Security, OID and Oracle Advanced Security

Do we also need Oracle Advanced Security when using the OID
solution (Oracle Application Server)? I just seem to remember
coming across something where some portion of the LDAP directory
needed to communicate over SSL, and I wasn't sure if this
implied that Oracle Advanced Security was needed.
Thanks.

Hi!
As long as you use the LDAP via SSL purely in the Application Server then there is no need for Advanced Security.
As you mentioned Enterprise Users - which is a database user authenticated by the OID, you will need the Advanced Security option.
cu
Andreas

PHP/MySQL updates within OS X S and Security updates?

Hey All,
Does anyone know of a link that will provide any info about PHP, PHP plug-in, or MySQL updates that are included in the Server OS or security updates, or any other software updates? This way I won't have to read through all of Apple's support articles for all OS and security updates.
Updating a bunch of web servers from OS X S 10.6.3 to OS X 10.6.6
Thank you in advance!

Great news thanks!

Integrate Oracle and PHP

Im trying to access my database using PHP, the problem is that i can get the Oracle Functions (PHP) to be recognized (It sends the following statement: Undefined Functions). Probably it's because I need some Oracle Libraries, but where can i get them...or which ones do i need in order to integrate it with PHP.
I hope you can help me out :)

Probably the wrong forum but I don't know where to direct you so I'll give it a go :-)
Check out:
* http://vsbabu.org/tutorials/oraphp.html (a bit dated but the comment at the end suggests some workarounds for Oracle8i)
* For general purpose reference check out http://www.php.net and search for Oracle
The client libraries you need are SQLNet or in Oracle8i terminology Net8 and in 9i, Net9i. These are on your database CD, normally on the client CD. If you can fire up SQLPlus on the machine running PHP you pretty much will be configured ... SQLPlus comes from the client CD too.
You can download the client CD at:
http://otn.oracle.com/software/products/oracle9i/content.html
Given its size of 600M (the install is much smaller) it can be a lot easier to use an existing copy you have on site.
Mike.

Using the Auth pear package with php 4 and oracle

Hi all.
I was wondering if anybody out there has had any success (or else) using the Auth Pear package with php 4 and Oracle.
I'm trying to do just that but can't get it to work.
I've found lots of examples on the web for mysql but none for oracle...
Feedback on your experiences with this would be most appreciated.
Thanks in advance.
Rob

Hi cj.
Thanks for your advice. I came across those documents but discarded them as they didn't deal with the Auth pear package I was intending on using. I didn't want to look at other alternatives as the focus of my project was primarily on migrating existing data from a mysql setup to an oracle setup. And quickly.
I hadn't found any documentation out there on using Auth with Oracle. All examples available on the web were mysql specific.
I eventually got round to gutting the code from the package and finding the fix to my problem.
Just for info, Auth expects by default an auth table containing two fields username and password. That's lowercase table and field names.
If the table name or field names to be used differ from these then they must be explicitly defined when calling Auth. Doing so resolved my problem.
My mysql db had all lowercase naming, while my oracle db has all uppercase naming throughout.
It is important to note that the Auth package uses the table and field names quoted, thus referring to the table and fields in a case sensitive way.
So for an uppercase table and fields setup the call has to be :
$options = array(
    'dsn' => "$dsn_for_my_oracledb",
    'table' => 'AUTH',
    'usernamecol' => 'USERNAME',
    'passwordcol' => 'PASSWORD',
    'db_fields' => '*',
$a = new Auth("DB", $options , "loginFunction");I hope this helps anybody trying to use this package with oracle. It worked great for me.
Pear Auth package documentation:
http://www.pear.php.net/manual/en/package.authentication.auth.intro.php
Regards,
Robert

Need info regarding Oracle UCM Accounts and Security Groups behaviour

Need information regarding Oracle UCM Accounts and Security Groups behaviour.
Oracle UCM version: 11.1.1.5.0
Steps:
1. Log in with "weblogic" user and created a content with id "content1"
2. Applied "@acc1(R)" and "TestGroup1" to the cotent created in step 1
3. Log out
4. Log in as "acc1user1", the user is not able to see the "content1"
5. Log out
6. Log in as "role1user1", the user is not able to see the "content1"
Account and Group information:
1. User "acc1user1" is part of "@acc1(R)"
2. User "role1user1" is part of "role1(R)" and is mapped to "TestGroup1" in UCM
Expected:
Both "acc1user1" and "role1user1" should be able to see "content1" as they have at least Read permission.
Please help me understand why the users are not able to see the content.

ACLs, like Accounts, are optional security setting which may add on some extra functionality to mandatory security groups. Likewise, the resulting permission is taken as an intersection of SG and ACLs.
But in the second part the number of set of users is huge (approx say 600)I don't get this completely. Does this mean that those "sets of users" (users who see the same data) are distinct and that there is 600 of such groups?
If you read thoroughly the manual I sent earlier, there is a recommendation that there should be maximum 50 security groups, and you should use accounts, should this number be exceeded. This means you could have all the documents in one security group (and have one common role with Read permission), but combine it with accounts. ACLs are not a good choice here - their performance and manageability is much worse than of accounts. ACLs are primarily used if you expect security settings to change during the lifetime (e.g. a project manager adds temporarily rights to access an item to another user, and revokes it when the user finishes his or her work).
Note that accounts as well as permissions of users within accounts can also be mapped externally (from LDAP/AD) and it usually follows some kind of org chart.
I'd feel more comfortable not to speak about users, security groups, roles, etc., but about some real-life objects and scenarios.

Difference between Security Oracle user and Security User

Hi All,
Can anyone give me the difference between Security-> Oracle -> user and Security-> User in System Administrator Resp of oracle apps R12.
Thanks,
Mahesh.
Edited by: 991854 on Mar 12, 2013 1:49 AM

Can anyone give me the difference between Security-> Oracle -> user and Security-> User in System Administrator Resp of oracle apps R12.Security > Oracle > Register:
Use this window to register an ORACLE username with Oracle E-Business Suite. An ORACLE username grants access privileges to the ORACLE database
http://docs.oracle.com/cd/E18727_01/doc.121/e12893/T174296T174305.htm
Security > Oracle > Data Group:
A data group defines the mapping between Oracle E-Business Suite products and ORACLE database IDs. A data group determines which Oracle database accounts a responsibility's forms, concurrent programs, and reports connect to. See: Defining Data Groups, Oracle E-Business Suite System Administrator's Guide - Configuration.
http://docs.oracle.com/cd/E18727_01/doc.121/e12843/T156458T156461.htm
Security > User > Define:
Use this window to define an Oracle E-Business Suite user. This user is an authorized user of Oracle E-Business Suite, and is uniquely identified by a username.
http://docs.oracle.com/cd/E18727_01/doc.121/e12843/T156458T156461.htm
Thanks,
Hussein

Oracle Password Security - suppress messages and use an application message

We are implementing Oracle Password Security and I was wondering if the Oracle message can be suppressed?
Reason being, I would like to give an application message based on the return code from Oracle.
Thanks.

Maybe I haven't explained it properly or I'm misunderstanding something but the exception init doesn't seem to be working.
We have set up a security profile and have set the Oracle password security profile parameters:
•     failed_login_attempts
•     password_grace_time
•     password_life_time
•     password_lock_time
•     password_reuse_max
•     password_reuse_time
•     password_verify_function
As we know on connect, Oracle checks the security profile and if a users P/W will be expiring, Oracle prompts an internal message to the user, error code ORA-28002. Is there a way to suppress the internal Oracle message and somehow capture the error code?
Thanks

Php page and oracle forms link

Dear All,
I am using Application server 10g to deploy my forms and reports. I have another web server on which I am giving users to login to access different applications. I have a php page and users are able to login there properly. But after login when they try to open the applications hosted on the Oracle Application Server 10g, they need to give user id and password again. Is it possible that we can link my web server and my application server so that users need not to login twice.
Regards
Trusha

This is possible only if the other server uses SSO.
Alternatively solution I am thinking ( Not tested )
1 Pass the username from the Server as a parameter to the welcome screen or
the first form.
2 Login using a guest account to the database in the intial screen.
3 Store the username and password in a table. Only guest got the acces to this table and only from forms.
4. When the userid is passed from the server, using guest account check if its a valid user name, if yes get the password from the table and login using that.
Note there is a risk of storing username /password in the database. So while storing the username/ password you can use some encryption and from the forms
decrypt it.
Rajesh Alex

Hetrogeneoues connection between Oracle and SQL server

Hi ,
I am having Issues in Making Heterogeneous DB link between Oracle Xe and sql server .
Here is the scenario-
My Oracle and ms SQL 2003 are running on same machine(windows 2003) ,
I have followed this link and reached till 5 but I am not able to tnsping the SQLSERVER DNS entry .
http://www.databasejournal.com/features/oracle/article.php/3442661/Making-a-Connection-from-Oracle-to-SQL-Server.htm
Below are my lintener and tnsfiles
LISTENER.ORA
===========================================================================================================================================================
SID_LIST_LISTENER =
(SID_LIST =
    (SID_DESC =
      (SID_NAME = PLSExtProc)
      (ORACLE_HOME = C:\oraclexe\app\oracle\product\11.2.0\server)
      (PROGRAM = extproc)
    (SID_DESC =
      (SID_NAME = CLRExtProc)
      (ORACLE_HOME = C:\oraclexe\app\oracle\product\11.2.0\server)
      (PROGRAM = extproc)
       (ENVS = "EXTPROC_DLLS=ONLY:C:\oraclexe\app\oracle\product\11.2.0\server\bin\OraClr11.dll")
LISTENER =
(DESCRIPTION_LIST =
    (DESCRIPTION =
      (ADDRESS = (PROTOCOL = IPC)(KEY = EXTPROC1))
      (ADDRESS = (PROTOCOL = TCP)(HOST = localhost)(PORT = 1521))
LISTENERSQL =
(ADDRESS_LIST=
      (ADDRESS=(PROTOCOL=ipc)(KEY=PNPKEY))
      (ADDRESS=(PROTOCOL=tcp)(HOST=localhost)(PORT=1522))
SID_LIST_LISTENERSQL=
(SID_LIST=
      (SID_DESC =
       (SID_NAME = SQLSRVRDBLNK)
       (ORACLE_HOME = C:\oraclexe\app\oracle\product\11.2.0\server)
       (PROGRAM = hsodbc)
===========================================================================================================================================================
TNSNAMES.ORA
XE =
(DESCRIPTION =
    (ADDRESS = (PROTOCOL = TCP)(HOST = testenviroment)(PORT = 1521))
    (CONNECT_DATA =
      (SERVER = DEDICATED)
      (SERVICE_NAME = XE)
EXTPROC_CONNECTION_DATA =
(DESCRIPTION =
    (ADDRESS_LIST =
      (ADDRESS = (PROTOCOL = IPC)(KEY = EXTPROC1))
    (CONNECT_DATA =
      (SID = PLSExtProc)
      (PRESENTATION = RO)
ORACLR_CONNECTION_DATA =
(DESCRIPTION =
    (ADDRESS_LIST =
      (ADDRESS = (PROTOCOL = IPC)(KEY = EXTPROC1))
    (CONNECT_DATA =
      (SID = CLRExtProc)
      (PRESENTATION = RO)
SQLSRVRDBLNK =
(DESCRIPTION=
(ADDRESS= (PROTOCOL=tcp)(HOST=localhost)(PORT=1522))
(CONNECT_DATA=(SID=SQLSRVRDBLNK)
(HS=OK)
========================================================================================================================================================
Listner Status
C:\oraclexe\app\oracle\product\11.2.0\server\network\ADMIN>lsnrctl status LISTENERSQL
LSNRCTL for 32-bit Windows: Version 11.2.0.2.0 - Production on 19-JUL-2013 13:15:59
Copyright (c) 1991, 2010, Oracle. All rights reserved.
Connecting to (ADDRESS=(PROTOCOL=ipc)(KEY=PNPKEY))
STATUS of the LISTENER
Alias                     LISTENERSQL
Version                   TNSLSNR for 32-bit Windows: Version 11.2.0.2.0 - Production
Start Date                19-JUL-2013 12:17:39
Uptime                    0 days 0 hr. 58 min. 24 sec
Trace Level               off
Security                  ON: Local OS Authentication
SNMP                      OFF
Listener Parameter File   C:\oraclexe\app\oracle\product\11.2.0\server\network\admin\listener.ora
Listener Log File         C:\oraclexe\app\oracle\diag\tnslsnr\testenviroment\listenersql\alert\log.xml
Listening Endpoints Summary...
(DESCRIPTION=(ADDRESS=(PROTOCOL=ipc)(PIPENAME=\\.\pipe\PNPKEYipc)))
(DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=127.0.0.1)(PORT=1522)))
Services Summary...
Service "SQLSRVRDBLNK" has 1 instance(s).
Instance "SQLSRVRDBLNK", status UNKNOWN, has 1 handler(s) for this service...
The command completed successfully
=========================================================================================================================================================
Now If I try to Tnsping SQL heterogeneous connection , i get
C:\oraclexe\app\oracle\product\11.2.0\server\network\ADMIN>tnsping SQLSRVRDBLNK
TNS Ping Utility for 32-bit Windows: Version 11.2.0.2.0 - Production on 19-JUL-2013 13:17:47
Copyright (c) 1997, 2010, Oracle. All rights reserved.
Used parameter files:
C:\oraclexe\app\oracle\product\11.2.0\server\network\admin\sqlnet.ora
Used TNSNAMES adapter to resolve the alias
Attempting to contact (DESCRIPTION=
TNS-12533: TNS:illegal ADDRESS parameters
Need Help , please suggest
Thanks,
Manish

Hi ,
Thanks for the update I have changed the Listener as suggested , now my Listener File is
SID_LIST_LISTENER =
(SID_LIST =
    (SID_DESC =
      (SID_NAME = PLSExtProc)
      (ORACLE_HOME = C:\oraclexe\app\oracle\product\11.2.0\server)
      (PROGRAM = extproc)
    (SID_DESC =
      (SID_NAME = CLRExtProc)
      (ORACLE_HOME = C:\oraclexe\app\oracle\product\11.2.0\server)
      (PROGRAM = extproc)
    (SID_DESC =
       (SID_NAME = SQLSRVRDBLNK)
       (ORACLE_HOME = C:\oraclexe\app\oracle\product\11.2.0\server)
       (PROGRAM = hsodbc)
       (ENVS = "EXTPROC_DLLS=ONLY:C:\oraclexe\app\oracle\product\11.2.0\server\bin\OraClr11.dll")
LISTENER =
(DESCRIPTION_LIST =
    (DESCRIPTION =
      (ADDRESS_LIST=
      (ADDRESS = (PROTOCOL = IPC)(KEY = EXTPROC1))
      (ADDRESS = (PROTOCOL = TCP)(HOST = 192.168.60.146)(PORT = 1521))
      (ADDRESS=(PROTOCOL=ipc)(KEY=PNPKEY))
      (ADDRESS=(PROTOCOL=tcp)(HOST=localhost)(PORT=1522)))
========================================================================================================================
and tns entry
SQLSRVRDBLNK =
(DESCRIPTION=
(ADDRESS= (PROTOCOL= TCP)(HOST=192.168.60.146)(PORT=1522))
(CONNECT_DATA=(SID=SQLSRVRDBLNK)
(HS=OK)
========================================================================================================================
Restarted the listener
C:\Documents and Settings\Administrator>lsnrctl start LISTENER
LSNRCTL for 32-bit Windows: Version 11.2.0.2.0 - Production on 20-JUL-2013 12:27:38
Copyright (c) 1991, 2010, Oracle. All rights reserved.
Starting tnslsnr: please wait...
TNSLSNR for 32-bit Windows: Version 11.2.0.2.0 - Production
System parameter file is C:\oraclexe\app\oracle\product\11.2.0\server\network\admin\listener.ora
Log messages written to C:\oraclexe\app\oracle\diag\tnslsnr\testenviroment\listener\alert\log.xml
Listening on: (DESCRIPTION=(ADDRESS=(PROTOCOL=ipc)(PIPENAME=\\.\pipe\EXTPROC1ipc)))
Listening on: (DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=192.168.60.146)(PORT=1521)))
Listening on: (DESCRIPTION=(ADDRESS=(PROTOCOL=ipc)(PIPENAME=\\.\pipe\PNPKEYipc)))
Listening on: (DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=127.0.0.1)(PORT=1522)))
Connecting to (DESCRIPTION=(ADDRESS=(PROTOCOL=IPC)(KEY=EXTPROC1)))
STATUS of the LISTENER
Alias                     LISTENER
Version                   TNSLSNR for 32-bit Windows: Version 11.2.0.2.0 - Production
Start Date                20-JUL-2013 12:27:44
Uptime                    0 days 0 hr. 0 min. 5 sec
Trace Level               off
Security                  ON: Local OS Authentication
SNMP                      OFF
Listener Parameter File   C:\oraclexe\app\oracle\product\11.2.0\server\network\admin\listener.ora
Listener Log File         C:\oraclexe\app\oracle\diag\tnslsnr\testenviroment\listener\alert\log.xml
Listening Endpoints Summary...
(DESCRIPTION=(ADDRESS=(PROTOCOL=ipc)(PIPENAME=\\.\pipe\EXTPROC1ipc)))
(DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=192.168.60.146)(PORT=1521)))
(DESCRIPTION=(ADDRESS=(PROTOCOL=ipc)(PIPENAME=\\.\pipe\PNPKEYipc)))
(DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=127.0.0.1)(PORT=1522)))
Services Summary...
Service "CLRExtProc" has 1 instance(s).
Instance "CLRExtProc", status UNKNOWN, has 1 handler(s) for this service...
Service "PLSExtProc" has 1 instance(s).
Instance "PLSExtProc", status UNKNOWN, has 1 handler(s) for this service...
Service "SQLSRVRDBLNK" has 1 instance(s).
Instance "SQLSRVRDBLNK", status UNKNOWN, has 1 handler(s) for this service...
The command completed successfully
========================================================================================================================
Still Getting the same Error
C:\Documents and Settings\Administrator>tnsping SQLSRVRDBLNK
TNS Ping Utility for 32-bit Windows: Version 11.2.0.2.0 - Production on 20-JUL-2013 12:27:52
Copyright (c) 1997, 2010, Oracle. All rights reserved.
Used parameter files:
C:\oraclexe\app\oracle\product\11.2.0\server\network\admin\sqlnet.ora
Used TNSNAMES adapter to resolve the alias
Attempting to contact (DESCRIPTION=
TNS-12533: TNS:illegal ADDRESS parameters
C:\Documents and Settings\Administrator>
========================================================================================================================
Do we need to change any thing in sqlnet.ora file for heterogeneous connection?
Thanks ,
Manish

Users And Security Best Practice

Dear Experts
I am designing an application with almost fifty users scattered in different places. Each users should access tables according to his/her criteria. For example salessam, salesjug can see only the sales related tables. purchasedon should access only purchase related tables. i have the following problems
Is it a best practice to create 50 users in the DB i.e. 50 Schemas are going to be created? Where are these users normally created?
or is it better for me to maintain a table of users and their passwords in my design itself and i regulate through the front end. seems that this would be risky and a cumbersome process.
Please advice
thanks
Manish Sawjiani

You would normally create a single schema to own the
objects and 50 users to use them. You would use roles
and object privileges to control access.Well, this is the classic 'Oracle' approach to do this. I might say it depends a bit on what you want to achieve. Let's call this approach A.
The other option was to have your own user/pwd table. You can create your own custom authentication but I would go for the built-in Application Express Users - authentication scheme. You can manage the users via the frontend (Application builder > manage Application Express Users) . There you can manage the groups and end users which you can leverage in your Apex app. You can even use the APIs to create the users programmatically. It is all done for you. Let's call this approach B.
Some things to consider:
1) You want to create a web application and also other applications that access the data stored in Oracle (another PHP / Oracle Forms / Perl ) or allow access via SQL/Plus. Then you should use approach A. This way you don't need to reimplement security for these different approaches.
2) You want to create one (or multiple) Apex applications only. This will be the only mechanism the users will access your data. Then I would go for approach B.
3) When using approach A some users didn't like that all users will have access to their workspace, including the sql command line and having the capability of building applications and possibly being able to change the data they have access to through the Oracle roles. Locking down this capability is possible but it takes some effort and requires an Apache as a proxy.
4) When using approach A you will need DBA privileges to manage the users and assign the roles. This might not always be possible nor desired. Depends on who will manage the Oracle XE instance.
5) Moving the application including the end users to another machine is a bit easier using approach B since they are exported via the application export mechanism. Using approach A you would have to do it yourself. Be aware that the passwords are lost when you install the users into a different Oracle XE instance.
6) If you design the application using approach B you will have to design security in a way that doesn't rely on the Oracle roles / grants security mechanisms. This makes it easier to change the authentication scheme later. For example, later you want to use a LDAP directory, a different custom authentication scheme or even SSO (SSO is not available out of the box but feasible). This is directly possible.
Using approach A you would have to recode the security mechanisms (which user is allowed to update/delete which data).
Hope that clarifies your options a bit.
~Dietmar.
Message was edited by:
Dietmar Aust
Corrected a typo in (5): Approach B instead of approach A , sorry.
Message was edited by:
Dietmar Aust

How to install Oracle Label Security in Oracle Database 10g EE

Hello All
I just want to know how to install Oracle Label Security in Oracle 10g Database EE.
I read in Oracle Enterprise Manager Grid Control Installation and Basic Configuration that Label Security must be installed before installing Enterprise Manager Grid Control.
I have Oracle Database 10g Release 1 (10.1.0.1) on my Windows XP System, and I patch it to 10.1.0.3.
M.
Sorry about my English.

Options is to connect to Oracle Policy Manager or use Oracle Internet Directory (OID)to administer Oracle Label Security.
Find more ways in the Documentation here:
http://download-uk.oracle.com/docs/cd/B19306_01/network.102/b14267/toc.htm

PHP- Oracle not working- Call to undefined function OCILogon() ERROR

Hi,
I am trying to just do a test program to test php - oracle connection,
My versions are: php5.2.1-Win32 and Oracle 10g
I have made the following settings:
1.) Uncommented the following lines in php.ini:
extension=php_oci8.dll
extension=php_oracle.dll
2.) Set extension_dir = "C:\php-5.2.1-Win32\ext"
Changed the httpd.conf file as: ADDED
1.)LoadModule php5_module C:/php-5.2.1-Win32/php5apache2.dll
2.)PHPIniDir "C:/Program Files/Apache Group/Apache2/conf-"
3.) LoadFile "C:/php/php5ts.dll"
4.)<IfModule php5_module>
<Location />
AddType text/html .php .phps
AddHandler application/x-httpd-php .php
AddHandler application/x-httpd-php-source .phps
</Location>
</IfModule>
5.) AddType application/x-httpd-php .php
AddType application/x-httpd-php .phtml
AddType application/x-httpd-php-source .phps
But when I am tryin to run the following program:
<?php
echo "<h1>OCI Test</h1>\n";
$conn=OCILogon("system", "sheetal16", "orcl");
$stmt = OCIParse($conn, "SELECT table_name FROM user_tables ORDER BY table_name");
OCIExecute($stmt, OCI_DEFAULT);
while (OCIFetch($stmt)) {
$table_name = OCIResult($stmt, "TABLE_NAME");
echo "$table_name<br />\n";
OCIFreeStatement($stmt);
OCILogoff($conn);
?>
I am getting the following error:
OCI Test
Fatal error: Call to undefined function OCILogon() in C:\Program Files\Apache Group\Apache2\htdocs\test2.php on line 3
Please help me to solve this problem.
Thanks,
Sheetal

See Re: PHP- Oracle not working- Call to undefined function OCILogon() ERROR

PHP, Oracle and Security

Similar Messages

Maybe you are looking for