Reports 6i Encrypting query string parameters using Web.Show_Document()

I am developing Forms 6i form which initiates a report on our reports server (using rwcgi60) using a call to Web.Show_Document(). However, we pass several parameters to the report from the form which we'd like to encrypt, otherwise they're likely to be abused.
For example, I might have something like:
http://www.myserver.com/dev60cgi/rwcgi60?report=MYREPORT&p_unsecure_param=1234
I am aware of the following document which describes how to use a JavaBean implmentation and client cookie to hide sensitive information using a client side cookie - but this appears to be specific to hiding user logon information - can it be extended to cover any parameter on the query string?
http://www.oracle.com/technology/products/forms/pdf/secure_webshowdoc_rep6i.pdf
...or will I have to provide my own solution - e.g. perhaps using the DBMS_OBFUSCATION encryption and decryption functions to pass an encrypted parameter string to the report, and have the report decrypt the string on the reports server....
I should probably point out that the parameter values are dynamic - not static, so adding an entry to cgicmd.dat isn't going to solve my problem.
Any ideas?
Shane

Frank,
Thanks for confirming this - this is what I had suspected - just wanted to check that there wasn't already some inbuilt functionality which I had overlooked. DBMS_OBFUSCATION_TOOLKIT it is then!
Shane

Similar Messages

Encrypt query string parameters

Hi All,
I have a SharePoint designer workflow email. I want to send encrypted link to users within email. Is there any way to send encrypted query string parameters?
Please guide me how to send parameters with url in email so that users cannot see it.
All suggestions are highly appreciated.
Regards and Thanks

Hi,
Per my knowledge, we can't Encrypt query string parameters in SharePoint Designer.
As a workaround, we can encrypt query string parameters using C# code and store the URL in a list. Then we can get the URL in SharePoint Designer.
http://www.codeproject.com/Articles/33350/Encrypting-Query-Strings
Best Regards
Dennis Guo
TechNet Community Support

Need example for using query string parameters in Web Dynpro

Hello,
Is it possible to transfer a Web DynPro application parameters at the query string (URL)?
Can someone please show me an example of how to pass it and how to retreive it using code inside an application?
Thank you in advance

Hi,
when launching WD apps in the Portal you have to define a WD iView in the Portal. This can be started using the NavigationTarget parameter.
Parameters (ie. Business Parameters) that should be passed to the WebDynpro application can be defined in the iView itself - the iView attribute is called "Application Parameters". Here you can also define variable expressions like "emailaddr=<User.email>" so that the value of the email address is evaluated on runtime.
This way you don't have to care about URL encodings at all
The following user expressions can be used:
<User.displayname>
<User.uniquename>
<User.firstname>
<User.lastname>
<User.salutation>
<User.jobtitle>
<User.department>
<User.email>
<User.telephone>
<User.mobile>
<User.fax>
<User.streetaddress>
<User.city>
<User.zip>
<User.country>
<User.state>
<User.timezone>
udo

Masking of query string parameters

Hello all,
I have a dot net application which has a query string parameters coming from a sharepoint site. I want to mask those incoming query string parameters.
Can anybody sugeest me whats the best method to mask paramters which are coming from another application, but not from any other aspx page.
Any help is greatly appreciated.
Thanks

Hello,
Seems that you've post your question in Sharepoint Forums, and some developers have given you suggestions or solutions. Please check the answers there and follow up if needed.
https://social.msdn.microsoft.com/Forums/office/en-US/d999d231-c517-4dbb-80e3-ede99eab09ed/encrypt-query-string-parameters?forum=sharepointdevelopment#d999d231-c517-4dbb-80e3-ede99eab09ed
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

How to pass multiple query string values using the same parameter in Query String (URL) Filter Web Part

Hi,
I want to pass multiple query string values using the same parameter in Query String (URL) Filter Web Part like mentioned below:
http://server/pages/Default.aspx?Title=Arup&Title=Ratan
But it always return those items whose "Title" value is "Arup". It is not returned any items whose "Title" is "Ratan".
I have followed the
http://office.microsoft.com/en-us/sharepointserver/HA102509991033.aspx#1
Please suggest me.
Thanks | Arup
THanks! Arup R(MCTS)
SucCeSS DoEs NOT MatTer.

Hi DH, sorry for not being clear.
It works when I create the connection from that web part that you want to be connected with the Query String Filter Web part. So let's say you created a web part page. Then you could connect a parameterized Excel Workbook to an Excel Web Access Web Part
(or a Performance Point Dashboard etc.) and you insert it into your page and add
a Query String Filter Web Part . Then you can connect them by editing the Query String Filter Web Part but also by editing the Excel Web Access Web Part. And only when I created from the latter it worked
with multiple values for one parameter. If you have any more questions let me know. See you, Ingo

Using RSA to encrypt query string data

If I want to use RSA to encrypt query string data, what is the industry standards for such a thing? I understand how the RSA works. Based upon that alone, I would just need to get the public key. However, I understand that it is safer to use a PKI to obtain that public key?
Can someone tell me what is "best practice" for such a thing?

If the third-party-site supports https:, you do NOT have to encrypt anything yourself. That's what https is for - the communication between the user-agent and the server is encrypted as part of the protocol, and all the complicated parts of insuring a secure channel are handled for you.
If the secure site does not support htpps, then you can't use it. Which begs the question of why you are trying to do secure communication via HTTP POST with an insecure site.
To clarify, so we're sure we're talking about the same scenario - there's your server (A), which generates pages for a user-agent (B), which pages point to a third-party site (C). Are you trying to protect your data from eavesdroppers? Or are you trying to hide it from B?
In the first case, you have two options.
1) If both A and C supports https, then all you need to do is build pages with https: URLs pointing at C, and you're done. B hits A using https: URLs, it gets pages back that point to C using https URLs, lots of crypto-magic happens under the covers without you haveing to worry about it, and your data is protected.
2) If A and/or C do NOT support https, then you have to figure out how to encrypt communications between A and C. This is a private channel - we won't be able to help you much, because we don't know what C is expecting. Whatever C's protocol is, and whatever its key is, is what you'll need to implement in A, in order to talk to C.
(If you're actually trying to hide data from B, while sticking it into a page that B has to render - ew. Just...ew. It's wrong on enough levels that I don't think I can adequately describe them all.)
You asked about best-practices - 1) is it. 2) is not. Don't do that. No offense, but specially given your level of understanding of How Crypto Works, whatever you come up with is really really REALLY likely to be horribly flawed in a way that you won't see.
Crypto is both easier and harder than you think it is. Your best bet is to use the standards that the community has hammered out - your data is much, much safer that way.
Grant

Using Query String Parameters with Session Scoped bean

I would like to pass query string parameters from a product page (user clicks on a specific product commandLink) that is request scope to a details page that is session scoped.
The problem is that the session scoped page only handles the first request. If you view the details of a product and then navigate back to the product page and choose another product ... the details page will not handle the new query string parameters and display the details for the first product chosen.
Is there a way to make the session scoped bean recognize the query string parameters past the first request?

I was able to replicate this problem with a very simple app that performs a redirection... just like the real app. Here's the simple app that I put together:
From request scope page:
<f:view>
         <h:form>
           <h:commandButton value="Link 1" action="#{reqbean.Link1}"/>
           <br/><br/>
          <h:commandButton value="Link 2" action="#{reqbean.Link2}"/>
        </h:form>
       </f:view>
From request scope bean:
public String Link1() throws IOException
    // Add event code here...
    //redirect the user
    FacesContext.getCurrentInstance().getExternalContext().redirect("untitled2.jspx?p=1");
    return null;
public String Link2() throws IOException
    // Add event code here...
    //redirect the user
    FacesContext.getCurrentInstance().getExternalContext().redirect("untitled2.jspx?p=2");
    return null;
}At this point... I put a println in the constructor of the session scoped bean because this is where I want to get the query string params. The constructor only gets called the first time a redirect is performed.

How to customize the SharePoint 2010 search query string parameters

Hi All,
I am trying to redirect default SharePoint search to a custom search results page.
I modified the Search Settings to redirect to the URL that I want.
But my custom search page takes different query string parameters to provide the results.
Eg: SharePoint search passes k=search term when we perform a search. But my custom page needs
test=search term
I would like to pass 'test' instead of 'k' as a query string. Is this possible?
Thanks
Carol

There is no way out of the box to change it. You could always write your own control that passes the value or inherit from SearchBoxEx web part (if you are using a search center) to pass a different value. Query String Filter web part won't
help you here I am afraid. However, wouldn't it be easier just to change your code to take the value that SharePoint passes you?
Corey Roth - SharePoint Server MVP blog:
www.dotnetmafia.com twitter: @coreyroth

UiXML and query string parameters

Is there a simple way to access a query string parameter within the destination page?
Example:
- in my source page I have something like:
<link text="My page destination"
destination="page?param1=value1" />
What I want is to be able to acces directly to the param1 within page.uix without handling events or writing any kind of java code.
I have tried to use ctrl:page, ctrl:eventResult or ctrl:servletRequest without success (thought it was not the right thing to do but gave it a try anyway).
As i understand (?) the doc query string parameters are event parameters:
- does it mean we can only deal with query string parameters in an event handler?
Oscar

Hi Oscar -
As i understand (?) the doc query string parameters are event parameters:
- does it mean we can only deal with query string parameters in an event handler? Right. The UIX Controller allows you to pass data to a new page using URL parameters in one of two ways: as event parameters - in which case you need to have a corresponding event handler - or as page properties. So, the built-in data providers that are supported by the UIX Controller (ctrl:page, ctrl:eventResult) are designed for supporting these two mechanisms.
If you do not want to write an event handler, then you could consider using page properties to pass your parameters. The following link shows how to use the pageURL bound value to construct a destination which includes a single page property:
<link text="Go to target page" xmlns="http://xmlns.oracle.com/uix/ui">
<boundAttribute name="destination">
<pageURL name="targetPage" xmlns="http://xmlns.oracle.com/uix/controller">
<properties>
<property key="prop1" value="value1"/>
</properties>
</pageURL>
</boundAttribute>
</link>
And the following sample shows how to bind to the same property:
<styledText data:text="prop1@ctrl:page"/>
Andy

[svn:osmf:] 13412: WebPlayer: optimizing JS code to forward all query string parameters to WebPlayer.swf .

Revision: 13412
Revision: 13412
Author:   [email protected]
Date:     2010-01-11 02:02:20 -0800 (Mon, 11 Jan 2010)
Log Message:
WebPlayer: optimizing JS code to forward all query string parameters to WebPlayer.swf.
Modified Paths:
    osmf/trunk/apps/samples/framework/WebPlayer/html-template/index.template.html
    osmf/trunk/apps/samples/framework/WebPlayer/src/Configuration.as

ls -l /var/run/lighttpd/
And how are you spawning the php instances? I don't see that in the daemons array anywhere.
EDIT: It looks like the info in that page is no longer using pre-spawned instances, but lighttpd adaptive-spawn. The documentation has been made inconsistent it looks like.
You will note that with pre-spawned information, the config looks different[1].
You need to do one or the other, not both (eg. choose adaptive-spawn, or pre-spawn..not both).
[1]: http://wiki.archlinux.org/index.php?tit … oldid=8051 "change"

Unable to open the reports as url using web.show_document

Hi experts,
I am trying the access the oracle reports from oracle forms. my forms is running at port 9001 and my report is configured at port 9002.
While trying to open the report using web.show_document(), the web page opens with port 9001 and returns 404 error. But when i change the port number to 9002 in the url it opens the report sucessfully.
Please find the forms and reports link below:
http://10.180.218.158:9001/forms/frmservlet?config=kvb11g
http://10.180.218.158:9002/reports/rwservlet/getjobid97?server=rptsvr_mohadam-in_adam2unst
i tried changing the machine name to ip address in the forms.conf and reports_ohs.conf as suggested in the link below. but it dint work out.
url -
https://forums.oracle.com/thread/1105289
http://prasadmadhasi.com/2011/11/19/changing-presentation-services-port-number-in-obiee-11g/
my reports_install.properties is given below,
#Reports Install Properties
#Fri Sep 13 16:10:59 IST 2013
WLS_USER=weblogic
USE_REPORTS_BUILDER=true
OHS_COMPONENT_NAME=ohs1
REPORTS_MANAGED_WLS_PORT=9002
SERVER_NAME=RptSvr_MOHADAM-IN_adam2unst
REPORTS_MANAGED_WLS_HOST=10.180.218.158
FORMS_CONFIGURED=true
ORACLE_INSTANCE_NAME=adam2unst
REPORTS_APP_DEPLOYMENT_DIR=C\:\\Oracle\\Middleware\\user_projects\\domains\\kvbdomain\\servers\\WLS_REPORTS\\tmp\\_WL_user\\reports_11.1.2\\uxabaw
INPROCESS_SERVER_NAME=RptSvr_MOHADAM-IN_adam2unst
MANAGED_SERVER_NAME=WLS_REPORTS
OHS_PORT=8891
DOMAIN_HOME=C\:/Oracle/Middleware/user_projects/domains/kvbdomain
COMMON_COMPONENTS_HOME=C\:\\Oracle\\MIDDLE~1\\ORACLE~1
ORACLE_INSTANCE=C\:\\Oracle\\Middleware\\adam2inst
REPORTS_APP_CONFIGURATION_DIR=C\:\\Oracle\\Middleware\\user_projects\\domains\\kvbdomain\\config\\fmwconfig\\servers\\WLS_REPORTS\\applications\\reports_11.1.2\\configuration
OHS_HOST=MOHADAM-IN.in.oracle.com
DOMAIN_NAME=kvbdomain
ORACLE_HOME=C\:\\Oracle\\Middleware\\Oracle_FRMHome
USE_OID=false
REPORTS_APP_VERSION=11.1.2
USE_SSL_FOR_APP_LDAP=false
INSTALL_MODE=deployment
SSO_CONFIGURED=false
Looking forward for your help.
Regards,
Syl

Hello,
this is the forum space
SQL Developer (Not for general SQL/PLSQL questions)
Please mark this thread as answered and post your question in Reports
Regards
Marcus

Issue while generating report using web.show_document with https

Hi All,
I am facing some issue while seeing the report using web.show_document as shown below:
https://ucrmskr.apac.nsroot.net:10301/forms/html/001725032_gca.rtf_
In this case the report opens directly without asking for me to save or open or cancel option
whereas if I hit
http://scrmskr.apac.nsroot.net:7801/forms/html/001725032_gca.rtf_
it asks for save or open or cancel option
so that I can save the report to my machine and open in wordpad format
The report generated in the first case is not coming in proper format
Below are my forms.conf mappings:
# Name
# forms.conf - Forms component Apache directives configuration file.
# Purpose
# It should include the weblogic managed server (routing) directives for
# the servers where Forms applications are deployed and other miscellaneous
# Forms component OHS directives.
# Remarks
# This file is included with the OHS configuration under
# $OI/config/OHS/<OHS Node Name>/moduleconf sub-directory.
# virtual mapping for the /forms/html mapping.
RewriteEngine on
RewriteRule ^/forms/html/(..*) /workaroundhtml/$1 [PT]
AliasMatch ^/workaroundhtml/(..*) "/ucrmap1/weblogic/bea/ucrms/config/FormsComponent/forms/html/$1"
RewriteRule ^/ucrms/icons/(..*) "/workaroundicons/$1" [PT]
AliasMatch ^/workaroundicons/(..*) "/ucrmap1/weblogic/bea/ORA_PFRD/forms/java/$1"
RewriteRule ^/forms/help/(..*) "/workaroundhelp/$1" [PT]
AliasMatch ^/workaroundhelp/(..*) "/ucrmap1/ucrrgbg2/help/$1"
<Location /forms>
SetHandler weblogic-handler
WebLogicCluster kauh0079:9001
DynamicServerList OFF
</Location>
Please let me know what needs to be done additionally if we are trying to hit https because in the second case we were hitting http with similar mapping in diff environment and it was generating report successfully.
Regards,
Harish

Thanks for answering,
I changed the URL from
http://nbotlaguduru.dms.local/export/FMSLaborChargesalcs20060829132645.pdf
to
http://nbotlaguduru.dms.local:8889/export/FMSLaborChargesalcs20060829132645.pdf
and the same problem occured
the file is located on my local C drive in:
C:\lcs\export
seems as though I am missing something else as well
any ideas?

Report Status using web.show_document

Hi all.
I am using the web.show_document for running my report - using distribution xml file and mail.
I want to insert a record in a table if the report generation succeeds.
From Oracle Documentation I can see that I cannot get the report status in the form when it is run using web.show_document.
And for distribution I cannot use run_report_object.
Any workaround for this?
Thanks in advance
Anu.

Dear Mr. hisham,
Thanks For your Post,
Actually i have the same issue, but it want to kill a running report in the report server by clicking such a button that have already the jobID.
whithout opening the reportserver page so that no body see any other reports running.
like in this example:
Declare
L_URL Varchar2(1000);
Begin
L_URL := :apps_server||'/reports/rwservlet/Killjobid'||:JOB_ID||'?'||'server='||:report_server;
WEB.SHOW_DOCUMENT ('javascript:window.open('||l_URL||');self.close()','_blank') ;
End;
Is it posible to do that, If so how can do it. and do i have to do any settin someware on the server like formsweb.cfg or reportserver.cnf.
thanks in advance.

Browser Time out in Reports (using WEB.SHOW_DOCUMENT to call reports)

When running a big report which takes a long time to run, it finishes on the report server but in the browser the screen is stuck at the parameter form, you don't see the report output. It's as if the browser has timedout. Is there a solution to this?
I am running reports using WEB.SHOW_DOCUMENT only - through a URL. This seems to be a huge drawback of using this method.

Is the browser launching?
If it is have you tried a show source on the browser window?
Sometimes if you open an XML file in a browser you get a blank page but the XML is there. Something to do with the XML format I think. I'm no expert on XML just a behaviour I have observed.

Error opening report using WEB.SHOW_DOCUMENT

Hi
I have a report in pdf format that opens ok by itself. When I use WEB.SHOW_DOCUMENT in the when_mouse_click trigger on the item in the form the report doesnt display. Only an IE window with "The page cannot be displayed" message.
Here is the trigger code:
Web.show_document(http://nbotlaguduru.dms.local/export/||FMSLaborChargesalcs20060829132645.pdf)
where FMSLaborChargesalcs20060829132645.pdf is the name of the report I am trying to open.
Here is the URL that appears in the second window that opens:
http://nbotlaguduru.dms.local/export/FMSLaborChargesalcs20060829132645.pdf
this url generates the error message "The page cannot be displayed"
I am using Forms [32 Bit] Version 10.1.2.0.2 (Production)
Oracle Database 10g Enterprise Edition Release 10.2.0.2.0 - Production
With the Partitioning, OLAP and Data Mining options
Report Builder 10.1.2.0.2
ORACLE Server Release 10.1.0.4.2
and I running the forms and reports server on my local machine.
Any help would be greatly appreciated. Thanks

Thanks for answering,
I changed the URL from
http://nbotlaguduru.dms.local/export/FMSLaborChargesalcs20060829132645.pdf
to
http://nbotlaguduru.dms.local:8889/export/FMSLaborChargesalcs20060829132645.pdf
and the same problem occured
the file is located on my local C drive in:
C:\lcs\export
seems as though I am missing something else as well
any ideas?

Reports 6i Encrypting query string parameters using Web.Show_Document()

Similar Messages

Maybe you are looking for