Wednesday, April 21, 2010

Dynamically Generate the Checksum id to solve the apex vulnerability problem

Ajax(Application Process) used call the Oracle Query of APEX_ITEM.MD5_CHECKSUM
  • Java method of Math.random used to get Random no
  • Random no used to get the Attribute value from Select list
Example : thisObj = objs[rand_no];
if(thisObj){
checksumId=thisObj.getAttribute('value');
return checksumId;

--- Apex Generate the checksum id per day only one time, I have customized and generated the checksum id per each page refresh.

Here show the checksum id screenshot,




















No comments:

Post a Comment