Home » Fusion Middleware & Colab Suite » Weblogic & Application Server » How to avoid listing of plsql informations on internet
How to avoid listing of plsql informations on internet [message #144457] Wed, 26 October 2005 09:56 Go to next message
jpresent
Messages: 3
Registered: October 2005
Location: France
Junior Member
Hi,
When a web surfer connects to my site, with an error on the begining procedure's name, a listing with all componants of the site appears and I want to avoid this. I use Apache and PLSQL components under IAS. The informations about Error_style=WebServer option in wdbsvr.app file of modplsql\cfg repertory doesn't work. How can I do?
Example of listing on the web I want delete:
Wed, 26 Oct 2005 14:49:13 GMT


page_accueil.paccueilt: PROCEDURE DOESN'T EXIST

DAD name: rpxx
PROCEDURE : page_accueil.paccueilt
URL : http://webadr/RPxx/rpxx/page_accueil.paccueilt
PARAMETERS :
============

ENVIRONMENT:
============
PLSQL_GATEWAY=WebDb
GATEWAY_IVERSION=2
SERVER_SOFTWARE=Oracle HTTP Server Powered by Apache/1.3.19 (Win32) mod_ssl/2.8.1 OpenSSL/0.9.5a mod_fastcgi/2.2.10 mod_oprocmgr/1.0 mod_perl/1.25
GATEWAY_INTERFACE=CGI/1.1
SERVER_PORT=nn
SERVER_NAME=webadr
REQUEST_METHOD=GET
QUERY_STRING=
PATH_INFO=/RPxx/rpxx/page_accueil.paccueilt
SCRIPT_NAME=/RPxx
REMOTE_ADDR=websurferadr
SERVER_PROTOCOL=HTTP/1.1
REQUEST_PROTOCOL=HTTP
REMOTE_USER=
HTTP_CONTENT_LENGTH=
HTTP_CONTENT_TYPE=
HTTP_USER_AGENT=Mozilla/5.0 (Windows; U; WinNT4.0; fr-FR; rv:1.7.7) Gecko/20050414 Firefox/1.0.3
HTTP_HOST=....... etc...
Re: How to avoid listing of plsql informations on internet [message #145544 is a reply to message #144457] Thu, 03 November 2005 14:09 Go to previous messageGo to next message
andrew again
Messages: 2577
Registered: March 2000
Senior Member
you can't expect an accurate answer without specifying what platform you are on and what version od the application server you are using.

in 9iAS 9.0.2 Look for $ORACLE_HOME/Apache/modplsql/conf/dads.conf

You most likely have a line like this which you can remove:
PlsqlErrorStyle DebugStyle


You should also be able to select a different value under Advanced settings for the DAD through the Web admin page.
Re: How to avoid listing of plsql informations on internet [message #145836 is a reply to message #145544] Mon, 07 November 2005 02:35 Go to previous messageGo to next message
jpresent
Messages: 3
Registered: October 2005
Location: France
Junior Member
Thank's.

But I have no line with PlsqlErrorStyle DebugStyle in file $ORACLE_HOME/Apache/modplsql/conf/dads.conf

and I tried to insert one with

PlsqlErrorStyle WebServer

without any effect.

I work under windows NT Service Pack 4, IAS and oracle 9iAS
Re: How to avoid listing of plsql informations on internet [message #145959 is a reply to message #145836] Mon, 07 November 2005 19:47 Go to previous messageGo to next message
andrew again
Messages: 2577
Registered: March 2000
Senior Member
The version if 9iAS is important - the DAD file has changed over different versions. Make sure you are editing the right file if there are multiple oracle homes. 9iAS 9.0.2 on Unix has an Infrastructure and a Middle-Tier oracle home. In a normal 9iAS setup, the mod_plsql handler is invoked by using http://host:port/pls/... in the url, and then the DAD name is "rpxx". If you don't find a section called "rpxx" in your config file, then you probably have the wrong file.
Re: How to avoid listing of plsql informations on internet [message #146073 is a reply to message #145959] Tue, 08 November 2005 07:56 Go to previous messageGo to next message
jpresent
Messages: 3
Registered: October 2005
Location: France
Junior Member
Hi,

Version is 9IAS Core 1.0.2.2.1 with
HTTP Server 1.3.19.0.0a
Apache Module for Oracle Servlet Engine 8.1.7.0.1
Gateway Mod PL/SQL 3.0.0.8.0
and so on...
with a data base 8i Patch Set 8.1.7.2.1
Re: How to avoid listing of plsql informations on internet [message #146111 is a reply to message #146073] Tue, 08 November 2005 13:18 Go to previous message
andrew again
Messages: 2577
Registered: March 2000
Senior Member
http://download-west.oracle.com/docs/cd/A97335_01/index.htm

I still think your mod_plsql need to be identified by the "pls" service handler name. If you change it to something else - I'd definitely follow the documented way to change it.
Previous Topic: HTTP_X_FORWARDED_FOR ??
Next Topic: Oracle AS/Integration
Goto Forum:
  


Current Time: Sun Nov 24 20:49:14 CST 2024