Security implication of 'Allow Public File Upload' to Yes

Hi
I am concerned about setting 'Allow Public File Upload' to Yes. Per the help text "Select Yes to permit unauthenticated users to upload files in applications that provide file upload controls. Select No to prevent unauthenticated users from uploading files in applications that provide file upload control"
That means anyone who has access to the URL can upload files of any type in to the application without any authentication.
Is this true?
Is this not a security risk in that case? Are there any alternatives which would allow 'authenticated' users to upload files via apex application.
Thank you
Kumar

Hi
Can you explain in detail? Sorry I am not an apex developer and as a DBA I was asked to set this setting in apex and since this affects all workspaces (and all apex applications) I was concerned about this.
I think we can have a custom procedure that checks to see who is uploading. One such example is given here
http://www.mandsconsulting.com/oracle-apex-tutorial-8-up-and-downloading-files-part-2-video-training
Also another concern is this
Allow Public File Upload [YES | NO] This applies only to applications that do not use any type of authentication, so that all users are anonymous. At first glance, file upload into the database seems relatively harmless, since the first threat that comes to mind is someone uploading a file with a virus, yet there is no way to execute a file inside the database that mitigates this risk . However, consider the possibility of someone uploading a bunch of large files. At the very least, this will be very resource intensive At some point, the tablespace used by the APEX_FILES schema will fill, which is essentially a denial-of-service attac

Similar Messages

How to allow image file uploading, but protect the directory from abuse?

I have an upload facility that allows visitors to upload their personal image (aka avatar) to my client’s site. This required me to CHMOD the assets folder to 777 which leaves the folder wide open to abuse.
Is there a way to allow the uploading of files but protect the directory from abuse?
I could put the images in the database but I assume that would quickly drag down the performance of the (MySQL) database.
Any ideas?!
Thank you in advance,
Glenn.

This required me to CHMOD the assets folder to 777 which leaves the folder wide open to abuse.
Only if the abuser can get an executable file of some sort into that folder. If you are filtering the files during upload to select only image files then I think you are pretty safe.
I could put the images in the database but I assume that would quickly drag down the performance of the (MySQL) database.
Definitely - you would never want to store the images as blobs unless you had a compelling reason to do so. It's much more forward thinking to just save the image filenames in the database, and link to them as needed.

How do I change my security settings to allow pdf files to auto-open in new version of adobe reader?

I have just updated my Adobe Reader and now I can't download and open pdf files anymore.
I tried going through the preferences in Reader, but it says that the setting is tied in with 'security administration' settings on Mac OS X.
I have not actually changed anything in the settings so am assuming that this is something to do with the most recent update to either Adobe Reader or OS X security.
What can I do to fix this?

Thank you for your help.
I also found that Mozilla Firefox seemed to be part of the problem.
Switched to google chrome and this seems to have made downloading pdf's possible again

Plugin for multi file upload in mod_plsql

Hi,
Is there any working plugin which allows multi-file upload in mod_plsql for apex 4.2
Thanks,

That plug-in jariolamentioned supports IE6 and higher, I used this at a client who works with IE8, so it will work with IE9 to.
Check the site for more information about browser support:
APEX Plugin - Multiple File Upload

Upload Friendly (Multiple File Upload Applet)

Title : Upload Friendly (Multiple File Upload Applet)
Description : UploadFriendly is an easy to use Java Applet that will allow multiple file
uploads on a web server in a web page. The control supports file filtering, limits and more.
Samples available in the following languages: ASP, ASP.NET, PHP, Coldfusion and JSP
Link: http://www.uploadfriendly.com/
Type: Commercial (30 days Trial)

Hi shiil,
To move the documents between site collection, content organizer rules would be a recommended method, you can activate Content Organizer features to enable content organizer rules on the site, to root the document to another site collection.
Also, for this issue, as Prasath suggested, you can check out the document in the ItemAdded event, then add ItemCheckedout event, in the ItemCheckedout event, delete the document. Or as content organizer rule does, you can create your own timer job to move
the document.
More information, Content Organizer Feature Overview for SharePoint Server 2010 Developers (ECM):
http://msdn.microsoft.com/en-us/library/office/ee558288(v=office.14).aspx
Thanks,
Qiao Wei
TechNet Community Support

Firefox 5.0.1 will not allow me to upload any files. I receive an error message, though I know the files are vaild.

Firefox 5.0.1 for Mac OS 10.6.8 is not allowing me to upload attachments. I get a pink band with the message "Files with errors will not be uploaded". When I click on the View Error link, it tells me "This file couldn't be added because it appears to be empty (0 bytes). " These are valid jpeg files that I have attached many times before, so I know there is no problem with the file. Also, Firefox has recently given me an error message about restarting in 32-bit mode to accommodate a plug-in. I have ticked the '32-bit" option in the Get Info window of the Firefox application.

I have been unable to drag and drop large files, even onto the Desktop, let alone onto my NAS - I get the dragged files freezing in the middle of the screen or I get the 'unable to copy / file in use' error.
Talking to Apple Support, they had me set up a new User, and then within that new account, the trouble went away. This pointed to the StartUp items being run in the original troublesome account,
I have deleted all of my 3rd Party programs and then installed them one by one until the problem came back, and in my case (Macbook Air 5,2 running 10.10.3 Yosemite) I found it was DropBox causing the conflict. I have DropBox running in the Menu Bar (top of screen) and disabling sync (bottom left corner) stopped the file copy problem. Try disabling DropBox sync is file copying is failing?

File upload and download using secure connection ??

hi,
i have to transfer file from clinet machine to server.
so, actually my need is, client submit form , then that file will go to url like "www.abc.com/ " server receives and store data in database and after that sends new file to that client
but all this transfer must be on secure way.
i have to done that in java only (not in jsp) and this concepts are new for me
so, how can i transfer that file ?
pls, help me......

You can also try the Jenkov HTTP Multipart File Upload. It's a servlet filter that is easy to add to your web-project. After adding it, you can access both request parameters and the uploaded files easily. It's more transparent than Apache Commons File Upload. There is sufficient documentation to get you started, and there is a forum if you have any questions.
Jenkov HTTP Multipart File Upload is available under the Apache license, meaning its free to use.

Should I allow a file: firefox.exe to be loaded on my computer. My security system is blocking ?

keep getting request to allow following file to be loaded on computer. firefox.exe library ddl. My security
system is blocking.

Please do allow it to run. Thank you.

Your current security settings do not allow this file....

Trying to download the latest version of iTunes and get the message "Your current security settings do not allow this file to be downloaded." I have made no changes at all, previous to attempting to download this update and have never had a download problem previous to this. I turned off my antivirus and set my browser security to its' lowest security level; still get the same message.

Uh...that would be a tad difficult. I'm not supposed to have it. No one is...yet. I keep in touch with a friend I worked with as a PC tech about 10 years ago at a Best Buy (while in college.) He does Beta testing, sends me odds and ends (that typically wreck my system) and this one halfway works (actually less than half the features.) But, I've escaped bad software in the past using it. Sometimes, however, it prevents good software from loading as well. That's why I have asked if anyone else reported this kind of thing.
The name, if you can find it, is 'Illegal Opcodes Anti-Trash.' Illegal Opcode is a screen name, by the way. And, it was written using Visual Basic. That's about all I can give you; that's pretty much all I know.
If anyone else can verify something similar to this, let me know. I could uninstall it (Anti-Trash) and try again, but I just read other peoples problems and I'm a little leary to say the least. My current version of iTunes still works fine, so why risk it.
Thanks for the feedback,
Bradley

Why doese this message appear"Your current security settings don't allow this file to be downloaded"

no one helped me in this post, why Adobe Company doesn't have an answer to my question?
please, i need your help
"Dear Helpers,
We used to use adobe reader 6 in our foundation to view pdf files on the internet, and since we had upgraded to the new version of adobe (to adobe 7 and X) the browser (IE 8) couldn't open any pdf file, and always returning this message: "Your current security settings do not allow this file to be downloaded".
we have a group policy that doesn't allow the users to download files from the internet, but when we were using adobe reader 6, this message have not occurred while opening pdf file online, and everything was fine,"
Please help me in this issue
Thanks in advance
Kind regards

Hi eleanora27327971,
I don't think there's a problem with the PDF file that you converted--that sounds more like a browser setting. What browser are you using? Are you able to download files from other websites? Or, are you able to log in to https://cloud.acrobat.com using a different web browser, and download from that browser? (See System requirements | Acrobat.com for a list of supported web browsers.)
Tell me a bit more about your setup (what operating system, browser and version), and I should be able to point you in the right direction.
Best,
Sara

How do I allow users to upload personal files through website?

How do I allow users to upload personal files through our website?
I am trying to allow the visitors the ability to upload images for a future contest we will be hosting. I am trying to build a submit form with personal fields (already got this done) along with a field they can upload 1 or 2 images. I want the form to send me an email with details along with image files. I have a BC webbasic+ account and I am using Muse for my web editing.
Can someone point me in the right direction?

Hi,
You could apply a "file attachment" field within the web form. If needing more than 1 file attachment you'll need to access your form code and hard-code the additional field.
The form will collect the file(s) and will be held within the case details under "related files". You can also assign a workflow to recieve notifications however only 1 file will appear in each email. To see the other files you'll need to access your order details.
All this can be create and managed within your site's admin. yoursite.com/admin
Within the site admin...
http://helpx.adobe.com/content/help/en/business-catalyst/using/create-insert-form.html (Creation of webform, etc)
http://helpx.adobe.com/content/help/en/business-catalyst/sbo/customer-database.html#id_227 59 (Manage customer web form submissions)
Hope this helps!
-Sidney

Security Implications of PUBLIC on packages

What are the security implications if a commercial software package that we use requires that dbms_pipe and dbms_lock be granted to PUBLIC? This seems pretty dangerous to me, or are there some controls that make this not so dangerous?
Thanks,

Depends what sort of security concerns you have...
I wouldn't be overly concerned about users accidentally causing problems using the dbms_pipe or dbms_lock packages. You could write a procedure that sleeps for a while, which might cause problems if that happened in the middle of a transaction, but that's a performance issue that ought to be identified in testing.
If your concern is with a determined attacker, I would tend to be more cautious with the dbms_pipe package, particularly if the application is piping data between processes, since an attacker could listen in on that conversation. Potentially, an attacker could cause application errors by sending messages to a process that caused it to stop waiting too soon.
Realistically, on the list of sins most third party database software is guilty of, these seem like pretty small potatoes.
Justin
Distributed Database Consulting, Inc.
http://www.ddbcinc.com/askDDBC

Calendar & File Upload Components - Threadinar6

Hi All,
This is the sixth in the "Threadinar" series , please see Threadinar5 at
http://swforum.sun.com/jive/thread.jspa?threadID=99473 for details
In this Threadinar we will focus on the
"Calendar" and "File Upload" Components
Let us begin our discussion with the Calendar Component.
Calendar Component
You can drag the Calendar component "calendar component icon" from the Palette's Basic category to a page open in the Visual Designer to create an entry field with an integrated calendar pop-up to help the user pick dates for the field.
You can also drop the calendar on a container component, like a table cell or group box.
After dragging the component to the Visual Designer, you can work with the following useful properties of the Calendar Component:-
General
* id. Type: String
The name of the Calendar component in the page bean and the JSP file.
Appearance
* columns. Type: int
The number of character columns used to render the component. The default value is 20.
* dateFormatPattern. Type: String
The format of the date to be entered by the user. It is not usually necessary to set this property because a pattern is chosen automatically based on the locale.
If you prefer to specify a date format, click the ellipsis button (...) to the right of the property and select a predefined date format from the property editor's list. You can also add your own formats. If you add a format, the values you can enter are limited to some combination of yyyy for the year, MM for the month, and dd for the day separated by separator characters. Typical separator characters are / (slash), . (period), and - (dash). For example, the following date formats are acceptable:
o MM/dd/yyyy
o yyyy.MM.dd
o MM-dd-yyyy
* dateFormatPatternHelp. Type: text
Text that appears below the date entry field and shows the format pattern that the date entry field accepts. If you have not set the dateFormatPattern property, the help text is chosen automatically for you. If you have set the dateFormatPattern property, you should bind the dateFormatPatternHelp property to a localized string that matches the setting for each locale you want to support.
* label. Type: String
A label that appears next to the text entry field, typically describing what the user is supposed to enter.
o Note: The label property is not as flexible as the Label component. You can use the Label component if you want more control over the label's appearance, such as positioning of the label relative to the component.
* labelLevel. Type: int
A number that affects the appearance of the label. 1 (Strong) is larger and bold. 2 (Medium), the default, is smaller and bold. 3 (Weak) is smaller and normal (not bold). This property takes effect only if the label property is set.
* style. Type: String
Cascading Style Sheet rules (CSS level 2) to be applied to the component. For example:
position: absolute; left: 288px; top: 312px
You can enter values directly or click the ellipsis (...) button to use the Style Editor.
o Note: This property overrides any settings in the theme or the project CSS file for this component. If a style specified in this property does not appear to take effect, it is because an area of the component is obscured by a child component that has different style settings.
For a list of CSS2 style attributes, see the web page at
http://www.w3.org/TR/REC-CSS2/propidx.html
* styleClass. Type: String
A space-separated list of CSS2 style classes to be applied when the component is rendered. The style classes must be defined in the project's style sheet or in the theme's CSS file. If you click the ellipsis button (...), you see a list of all styles you can add to this property. For information on adding CSS classes and rules to the project's cascading style sheet, see CSS Editor.
o Note: See the note above under the style property description for an explanation of why a class added to this property might appear to have no effect on the component.
o Note: If you add a CSS style class from the current theme to your project CSS file and you redefine the style class, the change affects all components that use this style class. However, you can add your own style classes to the project CSS file that redefine the default style classes, and then when you add them to this property, the changes affect only this instance of this component.
For the defaulttheme.jar CSS style classes for this component, see Calendar Component CSS Classes.
Data
* maxDate. Type: java.util.Date
The last date that the user can select. The default value is four years from the date set in the minDate property, for a total span of five years.
* minDate. Type: java.util.Date
The earliest date that the user can select. The default value is the value of the selectedDate property, which defaults to the current date if that property is not set.
* required. Type: boolean
If selected, the user must enter a value for the calendar before the page can be submitted. If you add a Message component to the page and link its for property to this component, an error message will be displayed if the user tries to submit the page without entering a value.
* selectedDate. Type: Date
A java.util.Date object representing the calendar date selected by the user. If you right-click the component and choose Bind to Data, you can bind this property to a data provider or object that can process the user entered value on the server.
When the component displays initially, if this property is not set, its value defaults to the current date. If you provide values for minDate and maxDate, you can also provide a value for this property that initially displays a date in that range.
* validator. Type: MethodBinding
Indicates the JavaServer Faces validator that is called when the value is submitted. A validator ensures that the correct value is entered by a user. Choose a validator from the drop-down list. If you choose (null), no validator is called. If you choose a validator, also select the required property to ensure that the validator is used. For descriptions of JavaServer Faces validators, see the list of topics at List of Validators.
o Note: If you define your own validate method, for example, by right-clicking the component and choosing Edit Event Handler > validate, any value you might have set in this property is overridden.
File Upload Component
You can drag the File Upload component "file upload component icon" from the Palette's Basic category to the Visual Designer to create an entry field and a browse button that opens a file chooser dialog on the local system, enabling the user either to select a file or to type a file name into the entry field. When the page is submitted, a copy of the file's contents is sent to the web application.
The component is similar to an HTML <input type="file"> element.
* Note: This component is neither supported by nor available in portlet projects due to security reasons.
* Note: The size of the component in the Visual Designer might not match the size of the component when it is rendered in a web browser, making the component appear to line up correctly in the Visual Designer, but not when the page is rendered in the user's web browser. Also, the rendering of this component can differ depending on the web browser. Be sure to test the component in the web browsers that you expect your users to use. For example, if you add a width setting to the style property that is smaller than the setting in the columns property, Internet Explorer observes only the width setting, while the Mozilla browser ignores it and sets the width according to the number of characters in the columns property.
The File upload component uses a filter, a com.sun.rave.web.ui.util.UploadFilter object that is configured for you in the web application's deployment descriptor. The UploadFilter uses the Apache commons fileupload package. You might need to change these settings in the following two cases:
* The server holds the uploaded file in memory unless it exceeds 4096 bytes; otherwise, the server holds the file contents in a temporary file. You can change this threshold by modifying the sizeThreshold parameter for the UploadFilter filter entry in the web application's web.xml file.
* By default, the File Upload component can handle files up to one megabyte in size. You can change the maximum file size by modifying the maxSize parameter for the UploadFilter filter entry in the application's web.xml file.
o
A negative value for the maxSize parameter indicates that there is no file size limit. Setting the parameter to a negative value is not recommended for security reasons. For example, if you allow unlimited file sizes, a malicious user could mount a denial of service attack on your site by using extremely large files
* To change the settings for the UploadFilter object in the web.xml file:
1. In the Files window, expand project-name > web > WEB-INF.
2. Double-click the web.xml node to open the file in the XML editor.
3. Click the Filters toolbar button.
4. In the UploadFilter section under Initialization Parameters, you can change the values for the maxSize and sizeThreshold parameters.
The contents of the uploaded file, together with some information about it, are stored in an instance of com.sun.rave.web.ui.model.UploadedFile. By using this object, you can get the content of the file as a String or write the contents to disk, as well as get properties such as the name and the size of the file. In the interest of conserving memory, the contents and file data are only available during the HTTP request in which the file was uploaded. To access the contents of the uploaded file, bind the uploadedFile property to a bean property of type com.sun.rave.web.ui.model.UploadedFile. Have the setter or an action method process the file.
The UploadedFile interface has methods for getting the name and size of the file, determining the file's MIME type (such as text/plain or image/jpeg), getting the file's contents as bytes or as a String, and writing the contents to disk. To learn more, in the Java editor, right-click on UploadedFile in a declaration statement and choose Show JavaDoc from the pop-up menu.
* To set the component's properties, select the component and edit its properties in the File Upload Properties Window.
* Right-click the component and choose one of the following pop-up menu items:
o Edit validate Event Handler. Opens the Java Editor with the cursor positioned in the component's validate method so you can insert code to validate the value of the component.
o Set Initial Focus. Gives this component focus when the user opens the page.
o Auto-submit on Change. Causes the form to be automatically submitted if the value of the component changes. Sets the component's JavaScript onclick property to common_timeoutSubmitForm(this.form, 'component-id');. At runtime, this code causes the form to be automatically submitted if the user changes the component value. Once the form is submitted, conversion and validation occur on the server and any value change listener methods execute, and then the page is redisplayed.
A component configured to Auto-submit on Change can use virtual forms to limit the input fields that are processed when the form is submitted. If the auto-submit component is defined to submit a virtual form, only the participants in that virtual form will be processed when the auto-submit occurs.
o Bind to Data. Bind the component's text property to an object or to a data provider. For more information, see Bind to Data Dialog Box.
o Property Bindings. Bind any of the component's properties to an object or data provider, such as the uploadedFile property to a bean property of type com.sun.rave.web.ui.model.UploadedFile.
o Configure Virtual Forms. Enables you to add the component to a virtual form.
For more details on using the "File Upload Component" Please see this tutorial
http://developers.sun.com/prodtech/javatools/jscreator/learning/tutorials/2/file_upload.html
Please share your comments, experiences, additional information, questions, feedback, etc. on these components.
------------------------------------------------------------------------------- --------------------

Of interest relating to file upload component to users : "Saving Uploaded Files Uploaded by the File Upload Component " Check the blog:
http://blogs.sun.com/roller/page/divas

File upload in KM throws a system exception: java.util.MissingResourceException: Can't find resource for bundle java.util.PropertyResourceBundle, key xtlt_Required

Hi All,
We are on Netweaver 7.01 SP14. (well I understand we are way behind patch levels, but a simple file upload should be working ?/)
We are trying to upload (HTML &/ Image) a file in one of the KM's public folder.
As and when we select folder and click on upload we get the below message:
Below is the error trace details:
Full Message Text
com.sapportals.wdf.WdfException
at com.sapportals.wcm.control.edit.ResourceUploadControl.render(ResourceUploadControl.java:688)
at com.sapportals.wdf.layout.HorizontalLayout.renderControls(HorizontalLayout.java:42)
at com.sapportals.wdf.stack.Pane.render(Pane.java:155)
at com.sapportals.wdf.stack.PaneStack.render(PaneStack.java:73)
at com.sapportals.wdf.layout.HorizontalLayout.renderPanes(HorizontalLayout.java:73)
at com.sapportals.wdf.stack.Pane.render(Pane.java:158)
at com.sapportals.wdf.stack.PaneStack.render(PaneStack.java:73)
at com.sapportals.wdf.layout.HorizontalLayout.renderPanes(HorizontalLayout.java:73)
at com.sapportals.wdf.stack.Pane.render(Pane.java:158)
at com.sapportals.wdf.stack.PaneStack.render(PaneStack.java:73)
at com.sapportals.wdf.layout.HorizontalLayout.renderPanes(HorizontalLayout.java:73)
at com.sapportals.wdf.stack.Pane.render(Pane.java:158)
at com.sapportals.wdf.stack.PaneStack.render(PaneStack.java:73)
at com.sapportals.wdf.WdfCompositeController.internalRender(WdfCompositeController.java:709)
at com.sapportals.wdf.WdfCompositeController.buildComposition(WdfCompositeController.java:674)
at com.sapportals.htmlb.AbstractCompositeComponent.preRender(AbstractCompositeComponent.java:33)
at com.sapportals.htmlb.Container.preRender(Container.java:120)
at com.sapportals.htmlb.Container.preRender(Container.java:120)
at com.sapportals.htmlb.Container.preRender(Container.java:120)
at com.sapportals.portal.htmlb.PrtContext.render(PrtContext.java:408)
at com.sapportals.htmlb.page.DynPage.doOutput(DynPage.java:238)
at com.sapportals.wcm.portal.component.base.KMControllerDynPage.doOutput(KMControllerDynPage.java:134)
at com.sapportals.htmlb.page.PageProcessor.handleRequest(PageProcessor.java:133)
at com.sapportals.portal.htmlb.page.PageProcessorComponent.doContent(PageProcessorComponent.java:134)
at com.sapportals.wcm.portal.component.base.ControllerComponent.doContent(ControllerComponent.java:88)
at com.sapportals.portal.prt.component.AbstractPortalComponent.serviceDeprecated(AbstractPortalComponent.java:209)
at com.sapportals.portal.prt.component.AbstractPortalComponent.service(AbstractPortalComponent.java:114)
at com.sapportals.portal.prt.core.PortalRequestManager.callPortalComponent(PortalRequestManager.java:328)
at com.sapportals.portal.prt.core.PortalRequestManager.dispatchRequest(PortalRequestManager.java:136)
at com.sapportals.portal.prt.core.PortalRequestManager.dispatchRequest(PortalRequestManager.java:189)
at com.sapportals.portal.prt.component.PortalComponentResponse.include(PortalComponentResponse.java:215)
at com.sapportals.portal.prt.pom.PortalNode.service(PortalNode.java:645)
at com.sapportals.portal.prt.core.PortalRequestManager.callPortalComponent(PortalRequestManager.java:328)
at com.sapportals.portal.prt.core.PortalRequestManager.dispatchRequest(PortalRequestManager.java:136)
at com.sapportals.portal.prt.core.PortalRequestManager.dispatchRequest(PortalRequestManager.java:189)
at com.sapportals.portal.prt.core.PortalRequestManager.runRequestCycle(PortalRequestManager.java:753)
at com.sapportals.portal.prt.connection.ServletConnection.handleRequest(ServletConnection.java:249)
at com.sapportals.portal.prt.dispatcher.Dispatcher$doService.run(Dispatcher.java:557)
at java.security.AccessController.doPrivileged(Native Method)
at com.sapportals.portal.prt.dispatcher.Dispatcher.service(Dispatcher.java:430)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.runServlet(HttpHandlerImpl.java:401)
at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.handleRequest(HttpHandlerImpl.java:266)
at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:386)
at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:364)
at com.sap.engine.services.httpserver.server.RequestAnalizer.invokeWebContainer(RequestAnalizer.java:1064)
at com.sap.engine.services.httpserver.server.RequestAnalizer.handle(RequestAnalizer.java:265)
at com.sap.engine.services.httpserver.server.Client.handle(Client.java:95)
at com.sap.engine.services.httpserver.server.Processor.request(Processor.java:175)
at com.sap.engine.core.service630.context.cluster.session.ApplicationSessionMessageListener.process(ApplicationSessionMessageListener.java:33)
at com.sap.engine.core.cluster.impl6.session.MessageRunner.run(MessageRunner.java:41)
at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)
at java.security.AccessController.doPrivileged(Native Method)
at com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:104)
at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:176)
--- Nested WDF Exception -----------------------
java.util.MissingResourceException: Can't find resource for bundle java.util.PropertyResourceBundle, key xtlt_Required
at java.util.ResourceBundle.getObject(ResourceBundle.java:327)
at java.util.ResourceBundle.getObject(ResourceBundle.java:324)
at java.util.ResourceBundle.getString(ResourceBundle.java:287)
at com.sapportals.wcm.util.resource.ResourceBundles.getString(ResourceBundles.java:55)
at com.sapportals.wcm.control.base.WcmBaseControl.getBaseBundleString(WcmBaseControl.java:150)
at com.sapportals.wcm.control.base.WcmBaseControl.getBaseBundleString(WcmBaseControl.java:176)
at com.sapportals.wcm.control.edit.ResourceUploadControl.renderUploadFileContent(ResourceUploadControl.java:773)
at com.sapportals.wcm.control.edit.ResourceUploadControl.render(ResourceUploadControl.java:655)
at com.sapportals.wdf.layout.HorizontalLayout.renderControls(HorizontalLayout.java:42)
at com.sapportals.wdf.stack.Pane.render(Pane.java:155)
at com.sapportals.wdf.stack.PaneStack.render(PaneStack.java:73)
at com.sapportals.wdf.layout.HorizontalLayout.renderPanes(HorizontalLayout.java:73)
at com.sapportals.wdf.stack.Pane.render(Pane.java:158)
at com.sapportals.wdf.stack.PaneStack.render(PaneStack.java:73)
at com.sapportals.wdf.layout.HorizontalLayout.renderPanes(HorizontalLayout.java:73)
at com.sapportals.wdf.stack.Pane.render(Pane.java:158)
at com.sapportals.wdf.stack.PaneStack.render(PaneStack.java:73)
at com.sapportals.wdf.layout.HorizontalLayout.renderPanes(HorizontalLayout.java:73)
at com.sapportals.wdf.stack.Pane.render(Pane.java:158)
at com.sapportals.wdf.stack.PaneStack.render(PaneStack.java:73)
at com.sapportals.wdf.WdfCompositeController.internalRender(WdfCompositeController.java:709)
at com.sapportals.wdf.WdfCompositeController.buildComposition(WdfCompositeController.java:674)
at com.sapportals.htmlb.AbstractCompositeComponent.preRender(AbstractCompositeComponent.java:33)
at com.sapportals.htmlb.Container.preRender(Container.java:120)
at com.sapportals.htmlb.Container.preRender(Container.java:120)
at com.sapportals.htmlb.Container.preRender(Container.java:120)
at com.sapportals.portal.htmlb.PrtContext.render(PrtContext.java:408)
at com.sapportals.htmlb.page.DynPage.doOutput(DynPage.java:238)
at com.sapportals.wcm.portal.component.base.KMControllerDynPage.doOutput(KMControllerDynPage.java:134)
at com.sapportals.htmlb.page.PageProcessor.handleRequest(PageProcessor.java:133)
at com.sapportals.portal.htmlb.page.PageProcessorComponent.doContent(PageProcessorComponent.java:134)
at com.sapportals.wcm.portal.component.base.ControllerComponent.doContent(ControllerComponent.java:88)
at com.sapportals.portal.prt.component.AbstractPortalComponent.serviceDeprecated(AbstractPortalComponent.java:209)
at com.sapportals.portal.prt.component.AbstractPortalComponent.service(AbstractPortalComponent.java:114)
at com.sapportals.portal.prt.core.PortalRequestManager.callPortalComponent(PortalRequestManager.java:328)
at com.sapportals.portal.prt.core.PortalRequestManager.dispatchRequest(PortalRequestManager.java:136)
at com.sapportals.portal.prt.core.PortalRequestManager.dispatchRequest(PortalRequestManager.java:189)
at com.sapportals.portal.prt.component.PortalComponentResponse.include(PortalComponentResponse.java:215)
at com.sapportals.portal.prt.pom.PortalNode.service(PortalNode.java:645)
at com.sapportals.portal.prt.core.PortalRequestManager.callPortalComponent(PortalRequestManager.java:328)
at com.sapportals.portal.prt.core.PortalRequestManager.dispatchRequest(PortalRequestManager.java:136)
at com.sapportals.portal.prt.core.PortalRequestManager.dispatchRequest(PortalRequestManager.java:189)
at com.sapportals.portal.prt.core.PortalRequestManager.runRequestCycle(PortalRequestManager.java:753)
at com.sapportals.portal.prt.connection.ServletConnection.handleRequest(ServletConnection.java:249)
at com.sapportals.portal.prt.dispatcher.Dispatcher$doService.run(Dispatcher.java:557)
at java.security.AccessController.doPrivileged(Native Method)
at com.sapportals.portal.prt.dispatcher.Dispatcher.service(Dispatcher.java:430)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.runServlet(HttpHandlerImpl.java:401)
at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.handleRequest(HttpHandlerImpl.java:266)
at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:386)
at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:364)
at com.sap.engine.services.httpserver.server.RequestAnalizer.invokeWebContainer(RequestAnalizer.java:1064)
at com.sap.engine.services.httpserver.server.RequestAnalizer.handle(RequestAnalizer.java:265)
at com.sap.engine.services.httpserver.server.Client.handle(Client.java:95)
at com.sap.engine.services.httpserver.server.Processor.request(Processor.java:175)
at com.sap.engine.core.service630.context.cluster.session.ApplicationSessionMessageListener.process(ApplicationSessionMessageListener.java:33)
at com.sap.engine.core.cluster.impl6.session.MessageRunner.run(MessageRunner.java:41)
at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)
at java.security.AccessController.doPrivileged(Native Method)
at com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:104)
at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:176)

Hi Vijay,
Thanks for the quick reply.
I have gone through the notes 1535201 & now on 1606563 after your advise.
Both the notes says the fix is available on 7.01 after SP 07 and we are on SP 14 already.
Also just in case I did checked with our basis and they confirmed we are a head and we have the above notes in our release already.
Unfortunately the notes are not the solution to the investigation till date.
Thanks,
Sai

File Upload in the Front End

I believe what I am about to ask isn't possible, however, I thought I should ask.before I say it cannot be done.
With open admin you can create file uploads that upload to a specified directory. Is there anyway to expose this on the front end of the site to allow for customers to upload files?
I ask because I would like to replicate a file upload feature that uploads to a specific directory of the site. Once that is done I display the image on the front end of the website.
I know I can upload files using a webform, however, this doesn't work for what I would like to do.
Any ideas or thoughts on this?

Hi Lynda,
That would be a security risk with bad files, viruses and open to abusive use.
You can submit files to a folder via a web app submission where you have to be logged in. This is that option for those reasons and a normal form submission goes into a case to keep it off your site so someone cant store and hotlink as a free storage space etc.

Security implication of 'Allow Public File Upload' to Yes

Similar Messages

Maybe you are looking for