Oracle APEX Best Practices电子书

Oracle APEX Best Practices

Table of Contents

Oracle APEX Best Practices

Credits

About the Authors

About the Reviewers

www.PacktPub.com

Support files, eBooks, discount offers and more

Why Subscribe?

Free Access for Packt account holders

Instant Updates on New Packt Books

Preface

What this book covers

What you need for this book

Who this book is for

Conventions

Reader feedback

Customer support

Downloading the example code

Errata

Piracy

Questions

1. Prepare and Build

History and background

Installing APEX

Runtime or full development environment

Build status

Tablespaces

Converting runtime environment into a full development environment and vice versa

Choosing a web server

OHS

EPG

APEX Listener

Creating a second administrator

APEX web interface

Command line

Other accounts

Database

Data model

Creating the database objects

Other tools

PL/SQL usage

Creating a workspace

Creating administrators, developers, and users

User Interface Defaults

Attribute Dictionary

Table Dictionary

Creating User Interface Defaults

Page Zero

Structure of multiple applications

Subscribe and publish

Creating a framework

Master and template application

Login application—optional

System application—optional

Deploying

Template workspace

Creating applications

List of values

Mapping the model to pages

Base tables

Master detail

Intersection

Simple report

Other pages

Summary

2. Leveraging the Database

Instrumentation

Efficient lookup tables

Single-table hash clusters

Index-organized tables

Analytic functions

Syntax overview

Examples

Running totals

Visualizing the window

Accessing values from other records

Another way of accessing other rows in the result set

Ranking—top N

Stringing it all together

Caveats

Aggregate functions

Grouping sets

Rollup

Cube

Identifying the totals and subtotals with grouping

Offloading your frontend and scheduling a job

One-off job

Pipelined table functions

Pipelined table functions in APEX

Using images

Searching the contents of documents

Summary

3. Printing

Printing architecture

What is planned for the future version of APEX Listener?

Installation and configuration of the Apache FOP report server

How to configure Apache FOP

Business Intelligence Publisher

Installation of Business Intelligence Publisher Version 11

Simple print test using BI Publisher

How to debug or troubleshoot printing issues

How to check if network services are enabled

Creating a report with BI Publisher

Creating the report query

Designing the report layout

Downloading XML data

Designing with the RTF template (MS Word)

Uploading the report layout

Linking the report to your application

How to create a report that can deliver output in different formats

How to add a chart to a report

Creating a chart in a report

How to add dynamic images to a report

Print API

How to bypass the 32K limit

Alternatives to use for PDF printing

Integration with Oracle Reports

Integration with Cocoon

Integration with JasperReports

Architecture

Plugins

Reports 2 PDF

Embedded PDF

Summary

4. Security

Securing Oracle Application Express for administrators

Protecting the database environment

Virtual Private Database

VPD policy

VPD and Application Context

Implementing VPD in APEX

What to do when you get a runtime exception

Securing the web listener

HTTP server

Rewrite

Security considerations in the HTTP server

Embedded PL/SQL gateway

Oracle Application Express Listener

Enabling SSL for the web server

Security considerations when installing Oracle Application Express

Runtime installation

Access Control Lists (ACLs)

Enabling builders in Oracle Application Express

Session timeout

Instance level

Application level

Password complexity rules

Patching strategy

Security considerations for the developer

Browser attacks

Cross-site scripting (XSS)

Protecting HTML regions and other static areas

Protecting dynamic output

Protecting reports regions

Protecting form items

SQL injection

Insecure use of variables

Correct use of Bind variables

SYS.DBMS_ASSERT

Security attributes

Authentication

Available 'out of the box' authentication schemes

Oracle Application Express accounts

Custom

Database accounts

HTTP header variable

LDAP directory

No authentication

Open door credentials

Single sign on

Oracle Cloud identity management

Authorization

Creating an authentication schema from scratch

Creating an access control administration page

Applying authorization schemas

Database schema

URL tampering

Session state protection against URL tampering

Browser security attributes

Cache

Embed in Frames

Database session

Authorization and authentication plugin

Secure items in an application

Item encryption

Hidden items protection

Items of type password

File upload items

Managing instance security

Application data

Fake input

Saving state before branching

Utilities

Application dashboard

How to check the security of your application

Oracle Application Express Advisor

Third-party tools to check on security

Summary

5. Debugging and Troubleshooting

Debugging an APEX page

Instrumentation of the APEX code

APEX_APPLICATION.G_DEBUG

The debug Advanced Programming Interface (API)

The APEX debug message

APEX_DEBUG_MESSAGE.LOG_MESSAGE

WWV_FLOW_API.SET_ENABLE_APP_DEBUGGING

APEX and Oracle SQL Developer

Remote debugging

Steps to be performed in APEX

JavaScript console wrapper

Installation of the console wrapper

Web development tools

Firebug

APEX and Firebug

Debugging dynamic actions

Yslow

Error handling

Logging and tracing

Enabling/disabling logging

Reports in Application Express that facilitate troubleshooting

Application Express Advisor

Summary

6. Deploy and Maintain

Package your application, or not?

Version control

Subversion

Deploying the database packages

Deploying the APEX application

Using the APEX environment

Using the command-line interface

Housekeeping the APEX repository

Being active and proactive

Feedback

Activate feedback

Processing entered feedback

Weighted page performance

Summary

A. Database Cloud Service and APEX 4.2

Oracle Public Cloud

Packaged applications

Plan for the future

RESTful web services

The RESTful Web Services wizard

Data load feature (SQL Workshop/utilities/data load)

Summary

Index