User changes the page HTML code on the fly and it works... what?!

Hi,
I have a report region that generates a number of checkboxes using htmldb_item.checkbox. Each checkbox is associated with a date, and what dates are displayed are based on a number of business rules.
The user then can select any date she wants (from the available list) and click "Confirm". A page process will identify the selected checkboxes (using the g_f01 array) and do some processing with them.
For my astonishment, a savvy user found out that, using a plug in like firebug, he could easily modify the page HTML and ADD extra checkboxes to the report, with WHATEVER dates he wanted! When submitting the page, Apex would not complain and would process those extra dates as if they had been sent when the page was generated.
Well you can imagine the potential impact of this... As a workaround, before processing the dates, I re-apply the same business rules just to be sure those are valid dates.
So I am a bit lost here... Has anyone else seen this before? Shouldn't Apex identify that there is extra data in the submitted page and raise an error? Is it my fault, the web platform is so insecure that I should be checking everything everywhere and not rely on the submitted data being reliable?
Any comments welcome.
Thanks,
Luis

Hi, thanks for sending the link for that plug-in, I can't wait to tell my users so they can start using it... :)
I understand that this in a way is due to the intrinsic weakness of the platform (I developed C/S applications for years and never heard of end users hacking Oracle Forms or Powerbuilder applications... at least not that easily)
On the other hand, I think that Apex should offer a minimum of automatic checking... for instance, if a tabular form rendered 10 rows, the submitted data should contain the same 10 rows, not more, not less. In fact that was my assumption. Maybe this is something that can be improved?
Luis

Similar Messages

  • On every page I get a box with a 2 and an OK button, the page behind it is grayed out and nothing works until OK is hit. I also get a box that says Suppress more alert dialogs from this page? With a check box and the OK button.

    Hoping to get this to go away!This just started today, I have run all my virus/malware, etc with no luck. Uninstalled and reinstalled Firefox as well. Any help and or suggestions would be appreciated as this is highly annoying!

    This issue can be caused by an extension that isn't working properly.
    Start Firefox in <u>[[Safe Mode]]</u> to check if one of the extensions is causing the problem (switch to the DEFAULT theme: Firefox (Tools) > Add-ons > Appearance/Themes).
    * Don't make any changes on the Safe mode start window.
    * https://support.mozilla.com/kb/Safe+Mode
    * [[Troubleshooting extensions and themes]]
    In Firefox 4 you can use one of these to start in <u>[[Safe mode]]</u>:
    * Help > Restart with Add-ons Disabled
    * Hold down the Shift key while double clicking the Firefox desktop shortcut (Windows)

  • How do I connect my Cinema Display to my MacBook Pro???  I have the dvi to vga display port thing and nothing works.

    How do I connect my Cinema Display to my MacBook Pro???  I have the dvi to vga display port thing and nothing works.

    What model (year) MacBook Pro?  Depending on the model, it may have DVI, mini DisplayPort, Thunderbolt, or HDMI video connectors.
    What model (yeasr) and size (17", 20". 22" ...) display.  Depending on the model, it may have ADC, singlre-link DVI, dual-link DVI, or Mini DisplayPort connectors.

  • While in Edit Mode in Moodle - page content does not render at all, but I am able to display the underlying HTML code. Happens only after upgrade to Firefox 11.0.

    While in edit mode in the Moodle course management system, the Page Content window should display the page as it will appear to the user. If you click on the "Edit" button, you are able to view the HTML code for the page. However, when you return to the normal display mode, the page is blank. This has occurred after the upgrade to Firefox 11.0. Page is normally rendered in Internet Explorer.

    A possible cause is security software (firewall,anti-virus) that blocks or restricts Firefox or the plugin-container process without informing you, possibly after detecting changes (update) to the Firefox program.
    Remove all rules for Firefox and the plugin-container from the permissions list in the firewall and let your firewall ask again for permission to get full unrestricted access to internet for Firefox and the plugin-container process and the updater process.
    See:
    *https://support.mozilla.org/kb/Server+not+found
    *https://support.mozilla.org/kb/Firewalls
    See also:
    *http://kb.mozillazine.org/Error_loading_websites
    *https://support.mozilla.org/kb/Error+loading+web+sites

  • "Message from Webpage (error) There was an error in the browser while setting properties into the page HTML, possibly due to invalid URLs or other values. Please try again or use different property values."

    I created a site column at the root of my site and I have publishing turned on.  I selected the Hyperlink with formatting and constraints for publishing.
    I went to my subsite and added the column.  The request was to have "Open in new tab" for their hyperlinks.  I was able to get the column to be added and yesterday we added items without a problem. 
    The problem arose when, today, a user told me that he could not edit the hyperlink.  He has modify / delete permissions on this list.
    He would edit the item, in a custom list, and click on the address "click to add a new hyperlink" and then he would get the error below after succesfully putting in the Selected URL (http://www.xxxxxx.com), Open
    Link in New Window checkbox, the Display Text, and Tooltip:
    "Message from Webpage  There was an error in the browser while setting properties into the page HTML, possibly due to invalid URLs or other values. Please try again or use different property values."
    We are on IE 9.0.8.1112 x86, Windows 7 SP1 Enterprise Edition x64
    The farm is running SharePoint 2010 SP2 Enterprise Edition August 2013 CU Mark 2, 14.0.7106.5002
    and I saw in another post, below with someone who had a similar problem and the IISreset fixed it, as did this problem.  I wonder if this is resolved in the latest updated CU of SharePoint, the April 2014 CU?
    Summary from this link below: Comment out, below, in AssetPickers.js
    //callbackThis.VerifyAnchorElement(HtmlElement, Config);
    perform IISReset
    This is referenced in the item below:
    http://social.technet.microsoft.com/Forums/en-US/d51a3899-e8ea-475e-89e9-770db550c06e/message-from-webpage-error-there-was-an-error-in-the-browser-while-setting?forum=sharepointgeneralprevious
    TThThis is possibly the same information that I saw, possibly from the above link as reference.
    http://seanshares.com/post/69022029652/having-problems-with-sharepoint-publishing-links-after
    Again, if I update my SharePoint 2010 farm to April 2014 CU is this going to resolve the issue I have?
    I don't mind changing the JS file, however I'd like to know / see if there is anything official regarding this instead of my having to change files.
    Thank you!
    Matt

    We had the same issue after applying the SP2 & August CU. we open the case with MSFT and get the same resolution as you mentioned.
    I blog about this issue and having the office reference.
    Later MSFT release the Hotfix for this on December 10, 2013 which i am 100% positive should be part of future CUs.
    So if you apply the April CU then you will be fine.
    Please remember to mark your question as answered &Vote helpful,if this solves/helps your problem. ****************************************************************************************** Thanks -WS MCITP(SharePoint 2010, 2013) Blog: http://wscheema.com/blog

  • Where is the HTML-Code for the Dashboard-Links defined? How to edit it?

    Hello everyone,
    I'd like to know where HTML-Code for the Dashboard-Links (My Dashboard, insert random Dashboardname here, ...) is defined.
    Inspecting HTML-Code via the browser, i'll got the following HTML-Tag:
    an <a'' href="...url"... class="CurrentPortal" name="DashboardBannerLink" title="...">Dashboard-name</a''>
    What i know is, that i can modify portalbanner.css and edit the style of those links.
    But thats not what i want, though. I want to modify the html-code itself, for example change the layout of the table etc, to meet our company's corporate design requirements.
    Thats why i tried to find the terms PortalLink and CurrentPortal within the Message-Database (/msgdb).
    Unfortunately, i got no results.
    As a consequence, I believe HTML for those Links is generated by saw.dll internally and therefore can not be edited.
    Now i need someone to prove me wrong ;)
    Thanks in advance,
    Chris
    Edited by: Chris2010 on 16.08.2010 11:11
    -had to edit the html tag, as the code was turned into a clickable link when i posted the thread

    I still didn't find a solution until now, although i checked almost every xml file, that i was able to find.
    At the moment I am sure, that it would be necessary to edit sawm-Parameter "bannerHtml" to meet my requirements. Now, i dont know whether its possible to edit it or not, since those saw-parameters do not seem to be documented on the web.
    That's the part, i found in dashboardtemplates.xml (Line: 362)
    <WebMessage name="kuiDashboardBanner" translate="no"><!-- Param bannerHtml --><!-- Param dashboardsURL -->
    <HTML>
    <table class="PortalBanner" width="100%" border="0" cellspacing="0">
    <tr>
    <td class="PortalLogo">
    "<\a href="@{dashboardsURL}">
    <img class="PortalLogoImage" border="0" src="fmap:Portal/PortalLogo.gif"/></a>
    "</td>
    <td class="PortalTop" style="vertical-align:top">
    <sawm:param name="bannerHtml"/></td>
    </tr></table>
    <sawm:messageRef name="kuiDashboardMainBar"><sawm:setParam name="product">dashboard</sawm:setParam></sawm:messageRef>
    </HTML></WebMessage>
    -----

  • I want to make 4x6 study notecard/flashcards, how do I change the page size to fit the cards I need, I want them to print on a standard size paper, but keep the text in a 4x6 margin, new to mac please help!!

    The Idea is to set my paper size and page layout to a pre-screened 4x6 layout, which I can add and insert txt/pictures, when I need to print, I should be able to fit 2 per page, if not that's okay, but when I print them I will cut off the excess paper and glue the rest to a notecard, any ideas, NEW TO MAC PAgES

    Star with:
    Menu > File > New from Template Chooser > Sidebar > Page Layout > Blank > Blank Canvas
    If you need to have two cards on one page then just set up one using text boxes and images to the 4 x 6 (inches?), group them and option shift drag a second copy down the page so you then have 2 and alter the copy as you need.
    Change the text and images to placeholders, capture those as a Layout and then save that as a template.
    http://www.freeforum101.com/iworktipsntrick/viewtopic.php?t=182&highlight=labels &mforum=iworktipsntrick
    1. To make the individual card follow the instructions for Labels & Business cards but use your size:
    2. To make the placeholders see Double folded Greeting Card.
    3. To make the template follow Letterhead and follower sets ignoring the irrelevant bits, and only capturing one page, before saving as a template.
    Peter

  • Change the Page Title for all the pages when viewing the Reports in Bi Publisher

    Hello ,
    I have a requirement for changing the Page Title for all the report displayed pages on the browser window.

    As far as I know, answer is NO.
    it's very simple answer  Manikandan-S-Oracle
    for 1210326 's requirements there are some places for changes of property "title" and in some pages "title" can be different
    "one place or option for changing" does not exist imho ( may be i'm wrong )
    so you can change places for your needs but not sure what it's adequate
    as example
    ...wls\user_projects\applications\bipdomain\xmlpserver\catalog\navigator.jsp  -->  find <title>
    it changes title in http://somehost:7001/xmlpserver/servlet/catalog
    ... wls\user_projects\applications\bipdomain\xmlpserver\home\home.jsp  -->  find <title>
    it changes title in http://somehost:7001/xmlpserver/servlet/home

  • In a document with several sections, in section VIII and IX one cannot select the text of the page foot nor set the pointer in it; so, one cannot write nor change the page foot text. Please help!

    in a document with several sections, in section VIII and IX one cannot select the text of the page foot nor set the pointer in it; so, one cannot write nor change the page foot text. Please help!

    Question already asked and answered several times.
    It's a bug striking in long documents.
    Select a word somewhere higher in the page then use the arrows to reach the wanted insertion point.
    Yvan KOENIG (VALLAURIS, France) mardi 23 août 2011 15:44:24
    iMac 21”5, i7, 2.8 GHz, 4 Gbytes, 1 Tbytes, mac OS X 10.6.8 and 10.7.0
    My iDisk is : <http://public.me.com/koenigyvan>
    Please :
    Search for questions similar to your own
    before submitting them to the community
    To be the AW6 successor, iWork MUST integrate a TRUE DB, not a list organizer !

  • Is there any way to have the page title NOT be the name of the HTML file

    You might want a page title to be say "Digital Media Academy." You don't however really want the html file to be called "Digital%20Media%20Academy.html" Windows web browsers often have problem opening pages with spaces in the file name. On the other hand you don't really want the page title to be "DigitalMediaAcademy" because that looks kind of dumb. Any way around this.

    The page is already not included in the nav bar, but
    where do you set the page name to be different from
    the file name? How can I set the name of the page,
    such as the name of this page is "Apple - Support -
    Discussions - Post Message:Reply," to be different
    from the file name?
    I think I probably misunderstood your question. You want the html "title," which appears at the top of a browser, to be independent of the name of the html file, right? I don't think that is possible in this version without manually editing the html after publishing. iWeb uses the page name given in the inspector for both the navigation bar link and the file name, replacing spaces by %20 in the latter because web servers don't allow spaces in file names.

  • Does anyone have the HTML code for the Buffy Font

    Does anyone have the HTML code for the Buffy Font?

    1) download one of the Buffy fonts @ font space, just as Hans-Günter wrote.
    2) go to FontSquirrel, and use the web font generator: http://www.fontsquirrel.com/tools/webfont-generator
    3) load up your buffy font, and generate the web font.
    4) download the zip package, and check out the included demo file
    Copy all the font files (all four of them) to your web folder. Then copy the code that looks like this to the top of your css:
    @font-face { font-family: 'FontName'; src: url('FileName.eot'); src: url('FileName.eot?#iefix') format('embedded-opentype'), url('FileName.woff') format('woff'), url('FileName.ttf') format('truetype'), url('FileName.svg#FontName') format('svg'); font-style: normal; font-weight: normal; }
    Check that all file references are set up correct, and use the font name  in your css rules.
    h1 {
    font-family: 'FontName';
    Done!

  • Changing my page size from American A4 to UK A4 shifts everything on the page, if I want everything on the page to stick to the top left rather than shift around, what do I do?

    Changing my page size from American A4 to UK A4 shifts everything on the page, if I want everything on the page to stick to the top left rather than shift to the right and down, what do I do?
    Using Indesign CS6.

    @Gabrielle – if you change the size in your document setup, pages always crop from the center of your spread, if you are using facing pages:
    Uwe

  • Firefox was a good, but now it's slow and when I search google I have to refresh the page when I click the back button. This is driving me to other browsers.

    When searching in goole, If I click on a link and want to go back a page firefox does not load the previous google search without refreshing the page. Because I use google frequently this is very annoying. Firefox has also been freezing and crashing most frequently of any of the other browsers that I have been driven to use. I'm not sure why I should keep it on my computer at this point.

    Regarding the Google results page blanking out when you go back, this occurs when using a combination of three settings, which may be fairly common:
    * Zoom level higher than two steps (120%; the newest versions of Windows apparently default to 125%, which Firefox detects and adopts)
    * Google search set to instant prediction results (default on Google search, but can be disabled in Search settings, see [https://support.google.com/websearch/answer/186610 Google Instant Search Help])
    * Opening results in the same tab, then using the Back button to return to the results page (default on Google search, but can be changed in Search settings to open results in a new window/tab, see [https://support.google.com/websearch/answer/425 Google Search Help])
    Firefox's cache feature attempts to maximize speed for forward and back actions by storing the last rendering of the page. Something about the instant prediction results ''with zoom'' is causing Firefox to briefly display the results and then they blank out and you have to reload the page to get them back. The mystery is why this only occurs (so far as I have heard) on Google? Is one of Google's scripts blanking out the page? Does Google care that it's messing up Firefox users?
    For now, if you do not want to or cannot change any one of the three factors needed to experience this problem, you can disable the storage of the last rendering of the page. Then Firefox will skip the shortcut and lay it out fresh, which is known to work. As noted in earlier posts, you make this change using the about:config preferences editor.
    (1) In a new tab, type or paste '''about:config''' in the address bar and press Enter. Click the button promising to be careful.
    (2) In the search box above the list, type or paste '''sess''' and pause while the list is filtered.
    (3) Double-click the '''browser.sessionhistory.max_total_viewers''' preference and change it to 0 (that's a zero).
    This thread has a lengthy discussion: [https://support.mozilla.org/en-US/questions/970863 When I go back to Google search results page, it takes me to a blank Google screen].

  • In my Yahoo mail: when I click on any opened email the page jumps down to the bottom of the email. I've contacted Yahoo about this. Is this a problem with Yahoo, Mozilla or neither? Is it just my computer has something wrong with it? This started last wee

    When I open a Yahoo email the page jumps down to the bottom of the page. Is this a Yahoo problem, Mozilla or neither?
    == This happened ==
    Every time Firefox opened
    == last week

    Clear the cache and the cookies from sites that cause problems.
    "Clear the Cache":
    *Tools > Options > Advanced > Network > Offline Storage (Cache): "Clear Now"
    "Remove Cookies" from sites causing problems:
    *Tools > Options > Privacy > Cookies: "Show Cookies"
    Start Firefox in <u>[[Safe Mode]]</u> to check if one of the extensions or if hardware acceleration is causing the problem (switch to the DEFAULT theme: Firefox (Tools) > Add-ons > Appearance/Themes).
    *Don't make any changes on the Safe mode start window.
    *https://support.mozilla.org/kb/Safe+Mode

  • In the Calendar there used to be the daily activities listed at the bottom of the page when you had the monthly view on it

    In the Calendar there used to be the daily activities listed at the bottom of the page when you had the monthly view on it.
    For example you could see the whole month, the day you select was highlighted and at the bottom of the page listed any activities.
    Now this does not happen. Am I missing something?
    The Calender seems to have gone backwards!!!
    HELP!!!
    PLEASE!!!!

    Ditto!  I have always preferred the month as the default view and the list at the page bottom let me know what I need to pay attention to for today (or tomorrow, or any future date).  Having to scoll through every hour of the day to find items that may or not be there is a huge waste of time!
    I hate this calendar!!!!  I've been okay with other changes in ios7 but they need to make changes.  How about letting us configure our own calendar views?  Choose "home" page look by month or week, itemize daily view by hour or by items entered, etc.

Maybe you are looking for

  • 3.1.2 no Baseband and error 1013 when recovering iPhone3GS

    Hi. I'm having this strange problem that it actually seems like im the only guy with a 3GS that have ever had that problem. well here it goes, i have my lovely iphone 3GS with firmware 3.1.2 but it crashed earlier yesterday when i tried to restore my

  • Copyin of LC to the Contract to Sales order

    Dear All. I have been created LC and attched to the Contract am creating Sales order with ref to contract ..But in sales order am not getting Data of LC from Contract pls give me solution .... Thanks Raja

  • How does one do a setActionForward("success")  using PageController

    how do i do this using the PageController class... is there a preferred way? cheers; Owen

  • Kernel Panic - analyse

    Hello, i got Kernel Panic from time to time on my Mac Pro. I guess, as Mac-novice, that it is USB related. As you can see i am running an Elgato TV-Card on native USB and an USB Hub with several USB devices (i.e. Ipod, external drives etc..) Question

  • Exporting anamorphic

    Trying to export a DV anamorphic sequence, but it keeps coming out without black bars at top and bottom - so it stretches it. My sequence settings are correct (I think): See my FCP timeline Image Hosted by ImageShack.usview here. I have tried exporti