Zero session ID

Hi
I am confused about what I have to do to initiate the zero session ID mode.
I wish to invoke this so that I can better track the usage of my application public pages via google analytics. But every page still shows and records the actual session ID.
The manual says that the zero sessionID mode kicks off when a user clicks a link having a zero session ID. But my application uses Tabs for navigation which don't give me the opportunity to set zero for the ID; I presume they use &SESSION. syntax.
My application starts by being invoked with a URL link from another non-apex application which contains a hard coded '0' (zero) in the session ID parameter location.
My application does branch from page to page in response to user activity, but not as the direct result of button clicks. My branching uses zero IDs, and also checksums for most pages to prevent URL tampering.
Do I need to abandon tabs and use buttons instead to force the user to click on a link containing a zero session ID parameter to get this working?
I would appreciate any advice on this.
Regards
CS

See +{message:id=10172227}+

Similar Messages

GET_BLOB_FILE_SRC not working with Zero Session ID

I have an application where I use the zero session ID for public users. The problem is, I have a region that contains a report linking to PDF files contained in a BLOB and I use GET_BLOB_FILE_SRC to link to the PDFs. I've included the report in my global content (page 0) and want it to be available to all visitors. The problem is, it only works when a user has authenticated. It throws a PAGE NOT FOUND error for public users. Does anyone know a way around this?

See +{message:id=10172227}+

Zero Session and bet_blob_file_src error

My application has several public pages that include links to PDF files stored in my database. The links are generated by a call to APEX_UTIL.GET_BLOB_FILE_SRC, which is wrapped by APEX_UTIL.PREPARE_URL. I am using the 0 session ID for these public pages and all works as expected until a user clicks on one of the PDF links, then the server returns "HTTP Status 500 - System Unavailable". However, if the user first authenticates and then clicks on the link, the PDF is displayed as expected. Has anyone else seen this behavior? Is there something I'm missing?
Thanks in advance,
Jeff

See +{message:id=10172227}+

Application Items - is there a better way?

My application is using few global items but if a user opens another browser session and opens different record, global items are overwriten.
What would you suggest?
Robert

"Facilitating Bookmarks by Using Zero as the Session IDIf the pages within an application are public and do not require authentication, you make it easier for application users to bookmark pages by using zero as the session ID.
Application pages that do not require authentication can be accessed with "f?p" URLs where the session ID is zero (that is, the single digit 0). When you request a page by either entering the URL in the browser or by clicking on a link having 0 for the session ID, the Application Express engine assigns a new session ID and sends a session cookie containing this new session ID to your browser. As you navigate through the application's public pages, you will see that all generated links to public pages will contain 0 for the session ID and all branches to public pages will have new URLs that use 0 as the visible session ID. Behind the scenes, however, the Application Express engine uses the session ID in the cookie as the actual session ID to locate session state.
This feature is useful when you want to hide the actual session ID. By hiding the session ID, you enable users to bookmark pages without needing to include the session ID in the bookmark link. As an added benefit, using zero as the session ID also keeps the actual session ID hidden from search engines.
In order to use zero as the session ID in your application, you have to generate at least one link having a zero session ID. The use of this first link starts the zero session ID mechanism. One approach would be to provide a single static link with a zero session ID on the application home page. For example, where you might normally code the link to page 2 as f?p=&APP_ID.:2:&APP_SESSION, you would code f?p=&APP_ID.:2:0."

Short question on tilting

Recently purchased and set up my live! notebook webcam. Works great. However I wanted to mount the cam on the side of the screen, but can find no option to tilt/turn the picture 90 degrees.
(I can only FLIP horizontal or vertical, which does not help)
Looking forward to your reply,
JMessage Edited by silvercobra on 12-28-2006 08:33 PM

Hi Tomas,
the session id is stored in the URL and the cookie because of security reasons.
For example if we don't also store the session id in the URL the following attack would be possible:
1) User logs in into his application and starts working
2) He gets an e-mail from a bad person which contains a link to the above application to trick the user to do something. The URL also contains setting some page items and also triggers the processing of the page to automatically perform an action.
3) If the user clicks this link, the action would immediately be executed within the application, because the user is already logged in (a valid session cookie is found by APEX)
That's the reason why APEX checks if the session id matches with the session id in the cookie, because a hacker can never generate a URL with the valid session id of the user.
About session zero: Session zero will only be used for public pages as long as you have not logged in yet. That's why it doesn't really expose a security risk.
Regards
Patrick
My Blog: http://www.inside-oracle-apex.com
APEX Plug-Ins: http://apex.oracle.com/plugins
Twitter: http://www.twitter.com/patrickwolf

Html block return

I'm using Apex 4.
I have a php app which I need to make a call to an apex I have. It should return the html for an unorder list.
e.g. <ul><li>blah 1</li><li> blah 2</li></ul>
It is posssible ? Or is apex always going to want to to put html, title, body tags in etc.
If it is what kind of page is it ?
Ed.

$.get('http://10.137.129.245:8423/apex/f?p=102:42:&SESSION_ID.:APPLICATION_PROCESS=getlinks', function(data) {
$('#result').html(data);
{quote}
You said that you're calling this from a PHP app, so of course it won't process the <tt>&SESSION_ID.</tt> substitution string. Use a <a href="http://download.oracle.com/docs/cd/E17556_01/doc/user.40/e15517/concept.htm#sthref121">zero session ID</a>.
(Please update your forum profile with a better handle than "user3608949", and post code fragments wrapped in <a href="http://wikis.sun.com/display/Forums/Forums+FAQ#ForumsFAQ-Arethereanyusefulformattingoptionsnotshownonthesidebar%3F">wrapped in <tt>\...\</tt> tags</a> to preserve formatting stop the forum software rendering HTML.)

Session 0 (Zero) and public pages

Hi APEX gurus,
I have some difficulties with public pages and session 0 in combination with Tabs.
The problem occur when i click on some of my Tabs. For some reason the session 0 is replaces with the proper session id. This only happens for some Tabs. When i go back to the previous Tab, session 0 i back i the URL...
I have tried to replicate this problem in a new application but I'm not able to reproduse this behavior :(
I use APEX version 3.2.1.00.12 and I only use one level of Tabs.
Can anybody give me a hint or clue to how I can debug this problem?
Best Regards
Trond

Some time ago, probably at the time of apex version 3.0 or even before, i had a similar issue.
Session zero makes sense if you are trying to get a stable URL that can be indexed optimally by search bots.
If you have a similar requirement, then it makes sense to change tab templates and replace javascript doSubmits with links containing session zero, because that will enable spiders to drill down your application, which would be impossible in the other way, unless there are additional links somewhere else in the page.
You will achieve the twofold result of stabilizing the indexed URLs and also make session zero more persistent for the user.
Flavio
http://oraclequirks.blogspot.com

HP T410 zero configuration thin client autostart rdp session

Hello,
I have several T410 zero config clients. I am able to sucessfully configure teh RDP session. I would like the thin client to automatically launch the configured rdp session. So that when starting up the client or rebooting. The end user would not have to press the connect button for the session to connect. I have looked at the HP device manager console options and searched the thin client setup and have not found a option to have the rdp session automatically launch

Joe, welcome to the forum.
I believe that you will receive more responses to your questions if you start a thread here. They are the members who know more about your situation.
Please click the "Thumbs up + button" if I have helped you and click "Accept as Solution" if your problem is solved.
Signature:
HP TouchPad - 1.2 GHz; 1 GB memory; 32 GB storage; WebOS/CyanogenMod 11(Kit Kat)
HP 10 Plus; Android-Kit Kat; 1.0 GHz Allwinner A31 ARM Cortex A7 Quad Core Processor ; 2GB RAM Memory Long: 2 GB DDR3L SDRAM (1600MHz); 16GB disable eMMC 16GB v4.51
HP Omen; i7-4710QH; 8 GB memory; 256 GB San Disk SSD; Win 8.1
HP Photosmart 7520 AIO
++++++++++++++++++
**Click the Thumbs Up+ to say 'Thanks' and the 'Accept as Solution' if I have solved your problem.**
Intelligence is God given; Wisdom is the sum of our mistakes!
I am not an HP employee.

How do I consolidate all project files to zero in my session?

Hi All, I'm a PT HD user and I'm helping someone mix their 4 song project. I need to consolidate the session files to zero so I can export and work/mix in Protools. Your help in appreciated!!!!!
ZH

To continue on bartwalsh's answer -
You can use the new feature - Export all tracks as audio files. This will do the same thing as consolidate in protools upon export although the regions within the logic arrange window will not be joined. All the exported files however will start at measure 1. One caveat I discovered - whenever I had a region of anything, midi or audio, muted or hidden, before measure 1 logic crapped out on me. Once I discovered this I moved everything a measure and it's worked well.
The old way is - create a blank bit of audio to place on each track at measure 1. Then select each track individually (which will select all the regions) and select Region/merge. This is quite noodley as you have to do it track by track. It's what I used to do when I had to export to pro tools.
Hope this helps.

I haved set all the relevant browsersessionrestore boolean settings to false or zero but I am still presented with the session restore icon on every login ?

browser.sessionstore.max_resumed_crashes;0
browser.sessionstore.max_tabs_undo;0
browser.sessionstore.max_windows_undo;0
browser.sessionstore.resume_from_crash;false
browser.sessionstore.resume_session_once;false

Are you talking about the button on the '''about:home''' homepage? <br />
Does that button actually restore the previous session?

Gnome-session failing because of dell_backlight brightness level zero

I just completed a new Arch install on a Dell Vostro 1220. After installing Xorg and GNOME and preparing .xinitrc, when I run startx GNOME fails to load. Sorry for the possible typos. Here is the log file:
$ cat .local/share/xorg/Xorg.0.log
[ 118.415] (EE) intel(0): Failed to set backlight dell_backlight for output LVDS1 to backlight level 0, disabling
[ 118.415] (EE)
[ 118.415] (EE) Backtrace:
[ 118.415] (EE) 0: /usr/bin/Xorg.bin (xorg_backtrace+0x56) [0x593966]
[ 118.415] (EE) 1: /usr/bin/Xorg.bin (0x400000+0x197b69) [0x597b69]
[ 118.415] (EE) 2: /usr/lib/libc.so.6 (0x7f5e52b0b000+0x33df0) [0x7f5e52b3edf0]
[ 118.415] (EE) 3: /usr/bin/Xorg.bin (RRDeleteOutputProperty+0x20) [0x4fcdb0]
[ 118.415] (EE) 4: /usr/lib/xorg/modules/drivers/intel_drv.so (0x...) [0x...]
[ 118.415] (EE) 5: /usr/lib/xorg/modules/drivers/intel_drv.so (0x...) [0x...]
[ 118.415] (EE) 6: /usr/lib/xorg/modules/drivers/intel_drv.so (0x...) [0x...]
[ 118.415] (EE) 7: /usr/lib/xorg/modules/drivers/intel_drv.so (0x...) [0x...]
[ 118.415] (EE) 8: /usr/lib/xorg/modules/drivers/intel_drv.so (0x...) [0x...]
[ 118.415] (EE) 9: /usr/lib/xorg/modules/drivers/intel_drv.so (0x...) [0x...]
[ 118.415] (EE) 10: /usr/bin/Xorg.bin (0x...) [0x...]
[ 118.415] (EE) 11: /usr/bin/Xorg.bin (0x...) [0x...]
[ 118.415] (EE) 12: /usr/bin/Xorg.bin (0x...) [0x...]
[ 118.415] (EE) 13: /usr/bin/Xorg.bin (0x...) [0x...]
[ 118.415] (EE) 14: /usr/bin/Xorg.bin (0x...) [0x...]
[ 118.415] (EE) 15: /usr/lib/libc.so.6 (__libc_start_main+0xf0) [0x...]
[ 118.415] (EE) 16: /usr/bin/Xorg.bin (0x...) [0x...]
[ 118.415] (EE)
[ 118.415] (EE) Segmentation fault at address 0x0
[ 118.415] (EE)
Fatal server error:
[ 118.415] (EE) Caught signal 11 (Segmentation fault). Server aborting
[ 118.415] (EE)
[ 119.270] (EE) Server terminated with error (1). Closing log file.

Thank you, but in my case, it happens for all the users and I didn't change the backlight for this problem to happen. In the bug report they also say the bug is fixed, but even though I have updated the files, my problem still remains.
Last edited by makhlaghi (2014-09-12 15:11:06)

Trying to move a list of form variables to session variables of the same name

I am trying to move a list of form variables to session variables of the same name and I am having a lot of trouble.
I have never had to post of this forum with a language question in all the 10 years I have been using ColdFusion. I was a qa Engineer @ Allaire/Macromedia back when it was going from one to the other. I have a pretty good grasp of the language.
I have software that runs off a list. The fieldnames are variable and stored off in an array. It's survey software that runs off a "meta file". In this example; I have the number of fields in the survey set to 12 in the "metafile". I have each field declared in that file in array Session.SurveyField[1] and the above loop works fine. I include this "metafile" at the start of the process.
I cfloop around a struct and it works wherever I have needed to use it; such as here - writing to the database for example;
<CFQUERY NAME="InsertRec" DATASOURCE="Survey">
INSERT into #variables.SurveyTableName#
(EntryTime
<cfloop from="1" to="#Session.NumberOfSurveyFields#" index="arrayindex">
,#Session.SurveyField[arrayindex]#
</cfloop>

   VALUES
    ('#EntryTime#'
<cfloop from="1" to="#Session.NumberOfSurveyFields#" index="arrayindex">
<cfset thisname = "Session." & Session.SurveyField[arrayindex]>
,'#evaluate(variables.thisname)#'
</cfloop>

</CFQUERY>
NOW HERE'S THE PROBLEM: I am running into trouble when trying to move the form variables to session variables of the same name. It is the only part of the software that I still need the datanames hard coded and that is a roadblock for me.
<cfloop from="1" to="#Session.NumberOfSurveyFields#" index="arrayindex">
<cfset thissessionfield = "Session." & Session.SurveyField[arrayindex]>
<cfset thisformfield = "Form." & Session.SurveyField[arrayindex]>
<cfset #thissessionfield# = #evaluate(thisformfield)#>
</cfloop>
I have tried it with or without the "evaluate"; same result. It doesn't give an error; it just ignores them (session variables look as such in the next page in the chain)
q01_name=
q02_acadtechorna=
q03_water=
q04_firstaid=
q05_cpr=
q06_lifeguard=
q07_aed=
q08_projadv=
q09_color=
q10_santaclaus=
q11_supervisor=
q12_supervisoropinion=
Note: they exist because I CFPARAM them in a loop like the above at the start of the procedure) - and this works just fine!
<cflock scope="Session" type="EXCLUSIVE" timeout="30">
<cfloop from="1" to="#Session.NumberOfSurveyFields#" index="arrayindex">
<cfset dataname = "Session." & Session.SurveyField[arrayindex]>
<cfparam name="#variables.dataname#" default="">
</cfloop>
</cflock>
I EVEN tried exploiting the Form.Fieldnames list using CFLoop over the list and the same sort of logic within and it still gives me nothing....
Here's the FORM.FIELDNAMES value
"Q01_NAME,Q02_ACADTECHORNA,Q03_WATER,Q04_FIRSTAID,Q05_CPR,Q06_LIFEGUARD,Q07_AED,Q08_PROJAD V,Q09_COLOR,
Q10_SANTACLAUS,Q11_SUPERVISOR,Q12_SUPERVISOROPINION"
Here's the logic; SAME RESULT - The session variables don't get set.
<cfoutput>
<cfloop list="#Form.FieldNames#" index="thisfield">

<cfscript>
thisSESSIONfield = "Session." & thisfield;
thisFORMfield = "Form." & thisfield;
#thisSESSIONfield# = #thisFORMfield#;
</cfscript>
</cfloop>
</cfoutput>
The CFPARAM in a loop with variable output name works just fine; so does the post (which I included above) as does the SQL Create, Param Form Variables, Param Session Variables, etc.
THIS even works for moving BLANK to each session variable, to zero them all out at the end of the process;
<cflock scope="Session" type="EXCLUSIVE" timeout="30">
<cfloop from="1" to="#Session.NumberOfSurveyFields#" index="arrayindex">
<cfset thislocalfield = Session.SurveyField[arrayindex]>
<cfscript>
thissessionfield = "Session." & thislocalfield;
</cfscript>
<cfset #thissessionfield# = "">
</cfloop>
</cflock>
Expanding on that code, you would think this would work, but it doesn't;
<cfloop from="1" to="#Session.NumberOfSurveyFields#" index="arrayindex">
<cfset thislocalfield = Session.SurveyField[arrayindex]>
<cfscript>
thissessionfield = "Session." & thislocalfield;
thisformfield = "Form." & thislocalfield;
</cfscript>


<cfoutput>
<cfset #thissessionfield# = "#evaluate(thisformfield)#">
</cfoutput>
</cfloop>
And see that debug code in the middle? To add insult to injury... When I uncomment that it shows me this. So it certainly looks like this should work....
Session.q01_name = "Me"
Session.q02_AcadTechORNA = "N/A"
Session.q03_Water = "Yes (certificate expired)"
Session.q04_FirstAid = "Yes (certificate is current)"
Session.q05_CPR = "No"
Session.q06_LifeGuard = "Yes (certificate expired)"
Session.q07_AED = "Yes (certificate expired)"
Session.q08_ProjAdv = "Yes (certificate expired)"
Session.q09_Color = "Gray"
Session.q10_SantaClaus = "Yes"
Session.q11_Supervisor = "Da Boss"
Session.q12_SupervisorOpinion = "Not a bad thing"
There must be some simpler way to do this. This way won't work against all odds even though it seems so much like it should.
So I end up having to hardcode it; still looking for an automated way to set these #@%$*@!## session variables over the list from the form variables of the same @#@!$#%$%# name. Do I sound frustrated???
No matter what I do, if I don't HARDCODE like this;
<cfset Session.q01_name = Form.q01_name>
<cfset Session.q02_AcadTechORNA = Form.q02_AcadTechORNA>
<cfset Session.q03_Water = Form.q03_Water>
<cfset Session.q04_FirstAid = Form.q04_FirstAid>
<cfset Session.q05_CPR = Form.q05_CPR>
<cfset Session.q06_LifeGuard = Form.q06_LifeGuard>
<cfset Session.q07_AED = Form.q07_AED>
<cfset Session.q08_ProjAdv = Form.q08_ProjAdv>
<cfset Session.q09_Color = Form.q09_Color>
<cfset Session.q10_SantaClaus = Form.q10_SantaClaus>
<cfset Session.q11_Supervisor = Form.q11_Supervisor>
<cfset Session.q12_SupervisorOpinion = Form.q12_SupervisorOpinion>
I always get this from my next page because the session variables are empty;
You must answer question 1.
You must answer question 2.
You must answer question 3.
You must answer question 4.
You must answer question 5.
You must answer question 6.
You must answer question 7.
You must answer question 8.
You must answer question 9.
You must answer question 10.
I tried duplicate as well, but I can not get the above to work...
Can anyone help me do this thing that one would think is simple????

I think if you use structure array syntax you should get the results you want.
<cfloop from="1" to="#Session.NumberOfSurveyFields#" index="arrayindex">
      <cfset session[Session.SurveyField[arrayindex]] = Form[Session.SurveyField[arrayindex]]>
</cfloop>
Or probably even easier.
<cfset session = duplicate(form)>

Difference between connection, session and process

Hi all,
Can anyone please update me on the difference between connection,session and process.
Thanks in advance,
- Sri

I got this useful note by googled in net. It describes session,connection,process gracefully.
A connection is a physical circuit between you and the database.A connection
might be one of many types -- most popular begin DEDICATED server and SHARED
server. Zero, one or more sessions may be established over a given connection
to the database as show above with sqlplus. A process will be used by a session
to execute statements. Sometimes there is a one to one relationship between
CONNECTION->SESSION->PROCESS (eg: a normal dedicated server connection).
Sometimes there is a one to many from connection to sessions (eg: like
autotrace, one connection, two sessions, one process). A process does not have
to be dedicated to a specific connection or session however, for example when
using shared server (MTS), your SESSION will grab a process from a pool of
processes in order to execute a statement. When the call is over, that process
is released back to the pool of processes.

How to "Purge" Session 0

Hi,
We have some pages which use Session 0. I also have some application items which have corresponding application computations that get set "On New Instance". The computations are pulling values from a table.
When we first access a page with session 0 the application items are set by the computation and then they maintain that state. We run into an issue when I change the values in the back end and want them propagated to the application items. For clients who have "normal" sessions they can wait until their next login, however session 0 maintains the "old" values. Is their a way to purge or clear session 0 so all the session variables are reset etc?
Here's an example:
App Item: F_EMP_COUNT
App Comp: SQL - On New Instance
select count(*)
from emp
Application Access:
Px w. Session 0 is accessed for the first time:
- F_EMP_COUNT is set with 10 (the number of employees)
time passes
I now insert a new record in emp and realize that I need to update values in session 0's state
At this point I'd like to purge session 0 so that the next time it is accessed it's values are reset.
Thank you,
Martin
[http://apex-smb.blogspot.com/]

Martin,
There is no "session 0". To clear whatever session you're in you can always request a URL with 'SESSION' in the clear-cache position in the URL. But that won't make your on-new instance computations fire again so the best thing to do would be to request a URL with no session ID. Then right after you get the new session, on the page requested, redirect to a URL with zero in the session ID position.
Scott

I don't want Safari to re-open all windows from last session; can't make it stop. Set Safari preferences to new window and new tab open with blank page, but it won't.

P.S. Also cleared cache and History. Running OS 10.7.4 and Safari 5.1.7.

I hate this "feature", and it is another example of Apple taking functionality (and choice) away from the user. In this article:
http://support.apple.com/kb/HT4550
there is a description of it.
Resume in OS X Lion
When you open Safari in Lion or restart the Mac, Safari automatically restores the open windows and tabs from your last browsing session, so you can continue right where you left off.
Tip: To open Safari without resume, hold down the shift key (⇧) as you open Safari. Safari will then open with the options you selected in the "General" tab of Safari preferences, options like your homepage.
In Mac OS X v10.6 and Microsoft Windows, you can choose to have Safari automatically restore your windows in the "General" tab of Safari preferences.
99 times out of 100, I DON'T want to restore all the windows from my last browser session. It makes zero sense for them to take the checkbox out of the General tab of the Safari Prefs.

Zero session ID

Similar Messages

Maybe you are looking for