كيف استطيع اخفاء server=rep_pc12 بعد اظهار التقرير في صفحة ويب

http://localhost:8889/reports/rwservlet/ge...server=rep_pc12

اخى و الله انا معرفش بذبت بس شفت ناس شغاله كده!!!!!!!!
لمل سالتو عنها قالى مش معموله بوركال ده شغل جافا معمول سكربت معين هو بيشغلو بيطلع صفحه ويحطها جنب التقرير
و لما يعمل رن فى الفورم يكتب الURL اللى عامله الاسكربت و الصفحه اتو متيكا تفتح التقرير

ممكن تعطينا السكريبت ؟؟؟

هو مش معايا بس انا هحاول اشوافه بس اعذرنى لو مقدرتش
بالتوفيق

الموضوع ده مهم فعلا

ياريت تقدر يابشمهندس تحضره

وربنا يجعله فى ميزان حسناتك

وفى الجانب الاخر سأقوم أيضا بالبحث عن حل له

ااخ حسام والي يوجد ملف في DevSuiteHome_1\reports\conf\cgicmd.dat اتوقع انو لوه علاقة بهذه الطريقة لاخفاء URL
ى
نوعند فتح الملف في النوت باد يوجد CGICMD.DAT Mapping file وعدة امثلة

الموضوع ده مهم فعلا

ياريت تقدر يابشمهندس تحضره

وربنا يجعله فى ميزان حسناتك

وفى الجانب الاخر سأقوم أيضا بالبحث عن حل له

صدقنى انا هحاول المشكله انى بس المشكله انا نسى شفتها فين او معين
انا خد نسخه منه بس بردك مش عارف فين ربنا يكرم

تم تعديل 1 مايو 201016 سنة بواسطة mostfa_future

Dear Brothers

It is my pleasure to inform you how to do regarding SECURING REPORTS URL

As Mr. hossam Wally informed If you looked closely at the URL to run our report over the Web, you noticed that there was sensitive information in it; information we certainly don’t want exposed in a URL for the entire world to see. How can we hide this information? The Reports Server can make use of something called a keymap file. This file hides the details of the report from the user’s eyes by referencing a key in a file on the server. The keymap file for the Reports Server is called cgicmd.dat and is located in <App_server_Home>/reports/conf. Here’s an example of some of the entries in that file:

orqa: report=breakb.rdf destype=cache desformat=html server=repserver
breakbparam: report=breakb.rdf destype=cache desformat=html server=repserver userid=scott/tiger@mydb

The key name is to the left of the colon. The parameters associated with that key are to the right of the colon. Note that in the keymap file, the parameters are separated by spaces (in the URL they were separated by ampersands). Our URL from above looks like this:

http://oski-mobile.basement.com:7778/reports/rwservlet?destype=cache&desformat=HTMLCSS& server=rep_oski-mobile&report=test.rdf&userid=system/manager@iasdb

We want to hide everything after the question mark, so would could create a key like this:

test_report: destype=cache desformat=HTMLCSS server=rep_oski-mobile report=test.rdf userid=system/manager@iasdb

We could then reference the keymap file with the following URL:

http://mageed_ahmed:7778/reports/rwservlet?test_report

To see all of the parameters that can be specified in the keymap file, look at the syntax for rwclient
This serves to hide the implementation details from the end-user. The cgicmd.dat file is not read dynamically, however, so every change to it requires you to stop and start the OC4J_BI_FORMS component in the Middle-Tier. (Personal note: there is a “Restart” button on the Enterprise Manager web page for all components, but it acts inconsistently. I always formally stop the component, then start it up again).
To put this component on a page, go back to the Navigator and click on the “Page Groups” tab. If you don’t have page group defined, create one now. Edit the root page for your page group. You can edit the page one of three ways: Graphical Mode, Layout Mode or List Mode. I prefer Layout mode, since it’s closest to Portal Release 1 and that’s the way I’m used to editing Portal pages. Click “Add Portlets” in the main region of the page:

Figure attached name rep_server.jpg
then “New”, then the name of your database provider. You should see Test_Report_URL (or whatever you named your URL) as one of the portlets that can be placed on this region. Click the link and it should appear in the selected portlets window on the right-hand side of the page. Your Portal page now has an Oracle Report integrated into it. Back on the Edit Page screen, you can click the “Graphical” link in the top left of the page. You should see the report (albeit clumsily placed) on the page.

Thanks
Ahmed

Dear Brothers

It is my pleasure to inform you how to do regarding SECURING REPORTS URL

As Mr. hossam Wally informed If you looked closely at the URL to run our report over the Web, you noticed that there was sensitive information in it; information we certainly don’t want exposed in a URL for the entire world to see. How can we hide this information? The Reports Server can make use of something called a keymap file. This file hides the details of the report from the user’s eyes by referencing a key in a file on the server. The keymap file for the Reports Server is called cgicmd.dat and is located in <App_server_Home>/reports/conf. Here’s an example of some of the entries in that file:

orqa: report=breakb.rdf destype=cache desformat=html server=repserver
breakbparam: report=breakb.rdf destype=cache desformat=html server=repserver userid=scott/tiger@mydb

The key name is to the left of the colon. The parameters associated with that key are to the right of the colon. Note that in the keymap file, the parameters are separated by spaces (in the URL they were separated by ampersands). Our URL from above looks like this:

http://app_server:7778/reports/rwservlet?destype=cache&desformat=HTMLCSS& server=rep_app_server&report=test.rdf&userid=system/manager@iasdb

We want to hide everything after the question mark, so would could create a key like this:

test_report: destype=cache desformat=HTMLCSS server=rep_app_server report=test.rdf userid=system/manager@iasdb

We could then reference the keymap file with the following URL:

http://mageed_ahmed:7778/reports/rwservlet?test_report

To see all of the parameters that can be specified in the keymap file, look at the syntax for rwclient
This serves to hide the implementation details from the end-user. The cgicmd.dat file is not read dynamically, however, so every change to it requires you to stop and start the OC4J_BI_FORMS component in the Middle-Tier. (Personal note: there is a “Restart” button on the Enterprise Manager web page for all components, but it acts inconsistently. I always formally stop the component, then start it up again).
To put this component on a page, go back to the Navigator and click on the “Page Groups” tab. If you don’t have page group defined, create one now. Edit the root page for your page group. You can edit the page one of three ways: Graphical Mode, Layout Mode or List Mode. I prefer Layout mode, since it’s closest to Portal Release 1 and that’s the way I’m used to editing Portal pages. Click “Add Portlets” in the main region of the page:

Figure attached name rep_server.jpg
then “New”, then the name of your database provider. You should see Test_Report_URL (or whatever you named your URL) as one of the portlets that can be placed on this region. Click the link and it should appear in the selected portlets window on the right-hand side of the page. Your Portal page now has an Oracle Report integrated into it. Back on the Edit Page screen, you can click the “Graphical” link in the top left of the page. You should see the report (albeit clumsily placed) on the page.

السلام عليكم

دائما متميز يابشمهندس

بارك الله فيك وجعله الله فى ميزان حسناتك

ان شاء الله أجرب وأرد على حضرتك .

انا فتحت الملف بس ماعرفتش اعدل فى ايه بالضبط

ممكن تفاصيل اكتر لاني ما فهمت شو المطلوب تعديله وشكرا جزيلا

هناك مشكلة أيضاً وهي ظهور اسم المستخدم وكلمة المرور واسم قاعدة البيانات في ال URL في التقرير هل من حل لإخفائها؟؟؟؟

طيب أولا لرد علي الاخ ساري

1-parameter FORMS90_HIDE_OBR_PARAMS can allow us to hide some username password from URL

2-+LGLQJXVHUQDPHDQGSDVVZRUG
To execute a report on the Web, the database connect information must be passed
as part of the request URL if you’re not using Single Sign-On in Oracle
Application Server 10J. Adding sensitive user information to any URL request is a
serious security breach because all URLs requested by a user can be looked up in
the Browser’s URL history.
If Single Sign-On is not an option to implement and Reports must be run through
the Web.Show_Document() Built-in , then, to avoid exposing the database
connect information in the Reports request URL, it is possible to store the
username and password pair in a temporary cookie on the client that can be read
by the Oracle Reports Servlet. The cookie is set by a Java Bean on the Forms Java
client and expires immediately after the Browser Window is closed.
Please read the Whitepaper “Oracle Forms Services - Secure Web.Show_
Document calls to Oracle Reports”, available at http:/ / otn.oracle.com/
products/ forms/ for a detailed description and coding example.


3- كما تم الشرح مسبقا
a Key Map file must be configured. By adding an entry to the Key Map file - typically found at $ORACLE_HOME/reports/conf/cgicmd.dat – the URL can reference that entry, instead of containing the username and password. For example, to use a Key Map for the previous URL, the entry in the cgicmd.dat file would look like this:
order: module=orders.rdf destype=cache desformat=PDF
userid=sspendol/oracle@syracuse p_order_id=%1

4-You can also specify the userid parameter in the cgicmd.dat file and thus hide it from
the URL. However the userid will show in the HTML source code of the parameter
form if used
When calling Web.Show_Document(), the second argument is specified as
‘_blank’, which means that the Reports output is shown in a separate browser


DECLARE
rep_url varchar2(2000);
BEGIN
rep_url:=‘/reports/rwservlet?server=repserv10g@fnimphiu-pc&report=reptest.rdf’
||’&desformat=htmlcss&destype=cache&userid=scott/tiger@orcl’
||’&p_deptno=10&paramform=no’;
WEB.SHOW_DOCUMENT(rep_url,’_blank’);
END;

وبالعودة للموضوع الاساسي

أيه {اي الشباب تستخدمو
Secure Web.Show_Document() calls to
Oracle Reports
دا موضوع سهل وحيساعدكو في عمل securing for all the needed URL contient plus Username and password
الملف مرفق

frmwebshowdoc_rep.pdf

ايضا الملف المرفق وأرجو من ساري النظر في صفحة 18 لاخفاء كلمة السر واسم المستخدم

frm10gsrw10g.pdf

شيئان مهمان
الاول لو أنك تستدعي تقرير من فورم يمكنك استخدام RUN_REPORT_OBJECT فلن يظهر اسم المستخدم وكلمة السر في ال URL

الثاني

يمكنك استخدام javascript لاخفاء كل adressbar وذلك عند المناداه باستخدام WEB.SHOWDOCUMENT

WEB.SHOW_DOCUMENT('javascript:void(window.open("the_url","","location=no,toolbar=no,menubar=no,status=no,resizable=yes"))','_blank');

مأ احب ايصاله لكم أن عالم 10g عالم رحب وفسيح يتسع لافكار كثيرة تتطلب منكم البحث والقراءة والتنفيذ ولا مانع من المحاولة والخطأ Try&Error

الاخ المهندس حسام والي المحترم
ذكرت أنك لا تعرف ماذا تعدل في الملف

لتشغيل Key Mapping يجب أن يكون الملف gicmd.dat موجود علي appserver في المسار
$DOMAIN_HOME/servers/WLS_REPORTS/stage/reports/reports/configuration/cgicmd.dat لو أنك تعمل علي يونكس ونفس المسار للويندوز وهو موجود لديك كما ذكرت

نأتي الان لاضافة Key Mapping Entries to a Key Map File
لاضافة key mapping entries ل key map file
- قم بفتح cgicmd.dat باستخدام text editor
-قم باضافة key mapping entry مثا التالي

key1: report=your_report.rdf userid=username/password@my_db desformat=html SERVER=server_name destype=cache

كما تلحظ يا حسام أن key1 هو ال key
- قم باضافة أو تعديل hyperlinks on your Web page ليكون
http://your_webserver.domain_name:port/alias/rwservlet?key1

أرجوا أن تكون واضحة

بالتوفيق

شكراً لك استاذ mageed_ahmed
ولكم ماذ نضع هنا

void(window.open("the_url","هنا","location=no,toolbar=no,menubar=no,status=no,resizable=yes"))','_blank');

بارك الله فيك يابشمهندس

هنجرب ونرد على حضرتك ان شاء الله

key1: report=your_report.rdf userid=username/password@my_db desformat=html SERVER=server_name destype=cache

كده انا هاكتب كل الريبورت اللى عندى فى الكى


أو هاعمل كى لكل ريبورت ....

هل هي موجودة ال java bean التي تخفي اسم المستخدم وكلمة السر من اللينك وشكرا

شكراً لك استاذ؟؟ mmsalman87 ولكن نريد مثال عملي ولك الاجر والثواب

لان ما يضبط معي

انا مش عارف الطريقة ياريت حدا يحكيلنا

تالاستاذ الكريمmageed_ahmed نرجو وضع مثال عملي اذا سمحت لان ملاحظ جميع الاخوان لا يعرفون ؟؟؟؟؟
mmsalman87
انا مش عارف الطريقة ياريت حدا يحكيلنا؟؟؟

ارجو شرح هذا الكود

WEB.SHOW_DOCUMENT('javascript:void(window.open("the_url","","location=no,toolbar=no,menubar=no,status=no,resizable=yes"))','_blank');

ارجو من الاخوة الذين شاركو بهذه المشاركة عدم اهمالها لانها مهمة ؟؟؟؟؟