Application Express :: Session Cookie In Safari
Nov 7, 2013
I'm hitting a restriction or security feature(?) of Safari in iOS. One of our Apex applications is a page that runs in an iframe on a site. Apex is installed on a server inside our own network and is accessible via dns: office.ourcorp.com (fake name, just to clarify the situation).
We have a couple of different brands, that all have their own domains: brand1.com, brand2.com etc. All of these sites open the apex page inside an iframe. That all works beautifully in all browsers, except in Safari in iOS. in iOS, the apex page isn't showing. It seams it's because of the session cookie Apex sets. Safari can't set an cookie from another domain (a cross domain cookie). Is there a possibility to turn off the session cookie?(ORA_WWV_APP_xxx)? I also tried to set the 'cookie domain' option inside the authentication scheme to one of the domain names for our brands, but it still doesn't show up.
View 0 Replies
ADVERTISEMENT
Aug 21, 2012
(Apex 4.0.2) This thread mentions the same problem I am having:
Shuttle empty when on iPad / safari
In the iPad, the shuttle item displays like this:
Select >>
Stores [0 items [...]] > [0 items [...]]
<
<<You need to click on the select list on the left, select the items you want to transfer to the right, then click the > icon. Not very user friendly.
The same on the right side: it always says "0 items" even when there are items in the right of the shuttle. Looks like an iPad issue. Are there any workarounds for it?
View 1 Replies
View Related
Nov 12, 2012
When I call a classic report that is exported throuh restful webservice, result depends on whether I also send cookie or not. In the first case, access is enabled, in the latter case, HTTP 404 is returned.
Restful access is enabled in the instance. Having an app with ID=101, page 9901 that is public, a classic report called MYREPORT on the restful side, the following call is issued:
/apex/apex_rest.getReport?app=101&page=9901&reportid=MYREPORT_ID&parmvalues=123445&output=json
If my browser send the cookie below with the request, I get back the result. If I delete the cookie from my browser, the result for the exact same apex_rest call is HTTP 404: Not found.
Cookie: ORA_WWV_USER_64731425336707=04893186A373057F5F1E1FCCD33113FA; PUBLIC_ORA_WWV_USER_64731425336707=-1; ORA_WWV_REMEMBER_UN=MYNAME:myworkspace
Details on my configuration is as follows:
Database: Oracle XE 11g, 11.2.0.2.0
Apex version: 4.1.1.00.23_en
Platform: Linux x64
HTTP is handles by XEXDB as folows from lsnrctl status:
(DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=kivi.omikk.bme.hu)(PORT=8080))(Presentation=HTTP)(Session=RAW))
Service "XEXDB" has 1 instance(s).
Instance "XE", status READY, has 1 handler(s) for this service...
View 2 Replies
View Related
Nov 19, 2012
I have an urgent requirement to kill an existing session if a new session starts for the same user. I have been reading lot of blogs and posts on the above topic, but could clearly tell me how to do it.
I thought of putting a process in 101 page when login button is pressed to catch this and kill the old session.
View 7 Replies
View Related
Oct 23, 2012
We are using Apex 4.0/Oracle 10gR2/ Hp-Ux, We noticed that there is a process Running in Two Sessions that seems running since 3 Hours using 60% CPU,** 30% given below sql it executes in two Sessions!
declare function x return boolean is begin -- if instr(upper(:F4000_P4651_PLUG_SOURCE),'ORDER BY')>0 then
declare
l_position number := 0;
begin
loop
l_position := instr(upper(:F4000_P4651_PLUG_SOURCE),'ORDER BY ',l_position + 1) ;
exit when instr(upper(:F4000_P4651_PLUG_SOURCE),'ORDER BY ',l_position + 1) = 0 ;
[code]....
View 4 Replies
View Related
Jan 24, 2013
I have multiple application set-up using session sharing within the workspace.Technically all works fine, however it does not play nice with user behaviour.
Example:
Users logs into APP_ID:100. Since he isn't authenticated yet, he provides user/pass and the APP_SESSION is authenticated.
Now if the user switches using to another application (using a link provided in application 100) he gets redirect to APP_ID:101:APP_SESSION all is fine.
The session is already authenticated, the application shares the session and the user gains access to app 101 without having to authenticate again. All's fine!
However users don't behave they way. Instead of using an easy link in the application. They will use their own bookmark or type in the url for app 101 manually. That way the next application is either called with f?p=101:1:[SOME OLD SESSIONID FROM BOOMARK] or f?p=101 (with no further page or session info) In both cases instead of using the already authenticated session apex spawns a new session, which of course isn't authenticated yet thus forcing the user to authenticate and come complaining they have to login again.
Similar behaviour problems exists when the user opens a browser and tries to open both applications in each in a tab next to each other.Both tabs fetch there own initial session id and start writing it to the same cookie each in turn invalidating the other tab's session.These can lead to some fanatic ping pong actions. Thus it's impossible to open 2 applications sharing session in the same browser.
Is there any remedy for these situations?Can apex be as smart as for instance first trying to resume the session stored in the cookie and only if that session is invalid, start a new session?
View 2 Replies
View Related
May 20, 2013
I am getting issue with passing a value in different session.I have pl sql procedure where i am passing value in hyperlink tag to oracle apex page.When i clicked on hyper link value is lost between session. how to send value between different session state.
<a href = "f?p=&APP_ID.:6:'||:app_session||'::P6_BACKUP_TIME:'||radio_value||' ">Select</a>
I have tried that but getting bad bind variable error. I am not understanding this issue.
View 8 Replies
View Related
Feb 18, 2013
I am to trying to fetch session id of a previously submitted process of a search button......so that i can display the search results in a different page.....so is there any sql query or pl/sql procedure to fetch the session id.
View 1 Replies
View Related
Jul 17, 2012
I have an application where I use the zero session ID for public users. The problem is, I have a region that contains a report linking to PDF files contained in a BLOB and I use GET_BLOB_FILE_SRC to link to the PDFs. I've included the report in my global content (page 0) and want it to be available to all visitors. The problem is, it only works when a user has authenticated. It throws a PAGE NOT FOUND error for public users.
View 1 Replies
View Related
Dec 6, 2012
I was making some page validation to APEX_ITEM manual tabular form. When every a validation executes it will clear all the data what user enters. What is the best method to hold the session values in APEX_ITEM.
View 4 Replies
View Related
Feb 27, 2013
I need to filter a SQL statement with an application item value retrieved from session state. I am assuming I could do this using a Dynamic Action on a Page Load event but I'm not sure where to go from here. How could I append the filter to an existing report page SQL statement?
View 7 Replies
View Related
Mar 24, 2013
I have some troubles with a "Set Value" Dynamic Action. What I want to do is set a Page Item with a specific variable derived from javascript. So basically I have a javascript variable 'test' that is being changed in javascript code. I am using a dynamic Action "Set Value" to set this value into a page item. As source, Im using "Javascript Expression". It is working, however, the Set Value Dynamic Action with JAvascript expression does not reflect this change in the session, so the page item is not updated.
I tried:
$s -> does not work
apex.submit -> does work, however submits the page. I need to submit only the Page item.
View 3 Replies
View Related
Sep 9, 2013
I have made Horizontal Wizard Progress List over 3 pages.I also made those 3 pages with some simple text fields, checkboxes and so on.On the last page I did the INSERT Process (session variables P100_Date ect).It worked fine! But now I tried a different approach
On each of the 3 pages I made a "Form on a Table or View" and on each pageI hide some of the form. (the advantage of this situation is, that apex gives you a visaul hint about the null fields and so on).But on the last page I cant do the INSERT with the session variables.(I can do the INSERT without session variable, with static values)...
View 5 Replies
View Related
Nov 21, 2012
I have upgraded from APEX 4.1 to 4.2.all read only items with dynamic action are arising below error:
session state protection violation: this may caused by manual alteration of protected item P2_IDACCSET.
View 16 Replies
View Related
Jan 15, 2013
Using apex 4.2. I have created form item on page and item attribute DISABLES IN SETTINGS , set value as YES and SESSION STATE value as YES.
SETTINGS->DISABLES-> SESSION STATE
by doing this i am getting the error. Error is
Session state protection violation: This may be caused by manual alteration of protected page item P98_CHECK_AMOUNT. If you are unsure what caused this error, please contact the application administrator for assistance.
View 8 Replies
View Related
Sep 20, 2013
I have searched for comment on this, but could'n find. So problem is ... not all of the page items are showing in SESSION STATE.
View 4 Replies
View Related
Nov 15, 2012
I am facing this problem, not sure how to solve this. Basically, the default value of the "items" on the page don't get set when the session is cleared and I visit the page for the first time.
So when I check the session for the first time, all page items are null. But when I revisit the page, the page items gets set sometimes.
View 6 Replies
View Related
Sep 24, 2013
APEX_ITEM functions do not seem to be working correctly. When I create a region with this query:
select APEX_ITEM.SELECT_LIST_FROM_QUERY(1, 1, 'select ''Jan'' d, 1 r from dual union select ''Feb'' d, 2 r from dual') month_id
from dual I get the error:report error:ORA-06502: PL/SQL: numeric or value error: associative array shape is not consistent with session parametersWhen I run that query in SQL Developer I get this:
<select name="f01" ><option value="%null%">%</option><option value="1" selected="selected">1</option></select>It
works but returns an incorrect result, there is no list.When I run that query in SQL Workshop on apex.oracle.com I get this:
<select name="f01" ><option value="%null%">%</option><option value="2" >Feb</option><option value="1" selected="selected">Jan</option></select>
which is correct.I tried changing NLS_COMP parameter from Linguistic to Binary and changing NLS_SORT to BINARY_CI but that did not make a difference. This seems like a rare problem and generally related to installation but it has me stopped dead in my tracks.
View 2 Replies
View Related
Jun 13, 2013
I have a calendar region using SkillBuilders plug-in. When click on an event, a modal page opens showing the event details and allowing the user to modify it. Recently, I enabled Session State Protection in my pages, so I changed my query in the calendar region to use the APEX_UTIL.PREPARE_URL function when generating the URL to edit the event. Now, when I click on an event, the URL looks like: [URL]....
p=34925:3:102130990572822::::P3_ID:41&cs=3DE8BFFE2FCA925B7716361D6ECFC546B If you notice the URL has & before the check-sum (cs), instead of just & and it is causing an error on my page. The reason is that the plug-in is escaping special characters. If I change the source of the plug-in to use this:
l_url := l_column_value_list(6)(x); Instead of:
[code]....
View 0 Replies
View Related
Feb 23, 2012
We are running a brower based client application in a J2EE container on weblogic, connecting to the database using proxy authentication from a connection pool.
We want to set the logging level in the front end, which should set a PL/SQL package/session variable to the respective value.
Any subsequent calls to the DB layer (stored procs) would then log appropriate messages depending on what the logging level has been set to.
The trouble is that the calls to be database are not persistent and in different sessions, and therefore the second call (i.e. the call to the stored proc) would not 'know' what the first call (to set the package variable) has done.
Alternatively we can change all the stored procedures to accept an input parameter denoting the logging level, but I am sure there are other better options.
View 7 Replies
View Related
Mar 5, 2013
I am trying use host command in Oracle forms. I get the process id as input from the user and on clicking ok the form should kill the session related to process id.
PS: Users will be entering only frmweb.exe process id which are inactive.
cmd := 'CMD /C taskkill /F /FI /pid 'process which is got as input' /IM frmweb.exe'; host(cmd)I also tried by writing the above command into a .bat file in application server.When trying to execute the bat file it din work. But when tryin to run the bat file by double clicking in Application server the session was killed.
On executing the above I am unable to kill the process. I would also like to know whether the host command was successful or not. Orakill and alter session are working but I don want to use it.
View 2 Replies
View Related
Sep 17, 2013
,in 11g,is there a way I could limit the number of open application actions by some os user ?We have an application where users are executing the same thing while the last is not yet finished,so we have several same things runninng at the same time executed by the same user.
Can we restrict that somehow through the database or that needs to be done through application?
View 4 Replies
View Related
Aug 28, 2013
Instead of giving permission directly to v$session and gv$session to a developer, Is there any other way to do the same?
View 3 Replies
View Related
Mar 4, 2013
We have integrated Oracle Access Manager 11gR1 with Oracle Apex 4.1. The OAM-Apex integration is working fine. Now we want an additional header variable to be passed from OAM to the Apex application. This new header variable will be user's sAMAccountName in Active Directory. OAM is integrated with AD and the AD users are successfully able to access the Apex applications.
The three header variables which are configure in OAM right now are:
Header variable name Value
1. OAM_REMOTE_USER $user.userid
2. OAM_REMOTE_USER_EMAIL $user.attr.mail
3. OAM_REMOTE_USER_GROUPS $user.groups
We need an additional header variable as mentioned below:
Header variable name: OAM_SAMACCOUNTNAME
Value: $user.attr.samaccountname
The new header variable was added in the OHS server's dads.conf file like shown below:
=========== dads.conf =============
...
PlsqlCGIEnvironmentList HTTP_OAM_REMOTE_USER
PlsqlCGIEnvironmentList HTTP_OAM_REMOTE_USER_GROUPS
PlsqlCGIEnvironmentList HTTP_OAM_REMOTE_USER_EMAIL
PlsqlCGIEnvironmentList HTTP_OAM_SAMACCOUNTNAME
But we are not able to read the value of this attribute in the Apex application.On the Apex application, we have a text box which shows the value of this header variable. This textbox is attached with the following stored procedure call to fetch the header variable:
===================
begin
:P1_HEADER_VALUE := owa_util.get_cgi_env( 'HTTP_OAM_SAMACCOUNTNAME' );
end;
The textbox shows the correct value if HTTP_OAM_REMOTE_USER is passed to the get_cgi_env method but does not shows anything when HTTP_OAM_SAMACCOUNTNAME is passed to the same method. if I am missing some configuration to pass the HTTP_OAM_SAMACCOUNTNAME haeder variable from OAM to Apex.
View 1 Replies
View Related
Apr 26, 2013
how to use checkbox item, and trying to get checked options values via application global arrays. So, this may be quite simple question, but I'm completely stuck here...
When I was looking through various threads and guides, I've encountered checkbox corresponding array names like "g_f01" - "g_f50". And so far i saw that these names are derived from item name in generated HTML code, for example:
<input type="checkbox" name="*f10*" value="3" />
And this one stands for array name "g_*f10*".However, when I tried to do the same thing - i receive item name which looks like "*p_v04*", and therefore, I can't figure out, which array name should I choose to adress it properly.
My generated HTML snippet:
<input type="checkbox" id="P6_ANSWER_0" name="*p_v04*" value="3"/>
View 2 Replies
View Related
Mar 23, 2013
i want to display a list of all users on a page those currently accessing or using the application. How do i accomplish this requirement?
View 1 Replies
View Related
Jul 5, 2013
APEX 4.0 Sometimes, I am getting the below error when I tried to logging into APEX workspace (after giving workspace name, User name and password), Expecting p_company or wwv_flow_company cookie to contain security group id of application owner.
ErrorERR-7621 Could not determine workspace for application (:) on application accept. I found some threads related to this but in different way not exactly when I am getting this error.
After 2 or 3 times, this error will not come and I can able to logging into workspace What is the cause for this issue??
View 1 Replies
View Related
Nov 4, 2013
Each time when I import an application into my workspace in local 10g XE using the APEX 4.2 Application Builder, I get the "ORA-02291, constraint wwv_flows_fk violated..". The application I whant to import was originally exported from [URL]. I found out, that it has to to with wwv_flow_application_install.get_workspace_id in the installation script, which obviously returns NULL and not my current workspace id as I suppose it should. I replaced wwv_flow_application_install.get_workspace_id by '<my worskspace id>' and then the import does work.
View 0 Replies
View Related
Jun 12, 2012
I have an application that I'd like to prevent activity in after a certain time of day, say 3pm. Is there any way I can force logout of all current users and then prevent re-login until 9am the next day (short of deleting all of their login credentials and then recreating them the next morning)?
View 7 Replies
View Related
Sep 12, 2013
We have developed an application for our clients,planning to deploy it in client server soon. we have plans to support the application in future,so we want to restrict the clients from any modifications. By Doubt is, 'build_status=Run only' alone,cannot protect our application from client developers to edit our application,
Because though we install our application as 'Run Only' at the time of installation in client instance,we can still import the original application and change the type to 'Build and Run Application',and run the new application as 'Build and Run'.(which is not supposed to) we want to make sure,if there is any way we can protect our application from modifications after client side installation.
View 1 Replies
View Related
