EDIT: Originally when I tried the new URL https://lathampool--tst2.custhelp.com/services/soap/connect/soap?wsdl=generic it got a 500, but when I tried it again it worked. Thread is resolved.

I remember accessing the standard WSDL through the following bookmarked URL https://lathampool--tst2.custhelp.com/cgi-bin/lathampool.cfg/services/soap?wsdl. However, I tried to access this today in all three environments and I am getting a 500 error with the message state in the title of this thread. How do I get access to my WSDL?

↧

Post survey response values to Survey Sessions table without survey link (1 Comment)

February 13, 2018, 7:30 am

≫ Next: ROQL to get Home Phone number without a where clause (11 Comments)

≪ Previous: The service was accessed in a non-supported manner. Please use standardized URL to access the... (1 Comment)

Topic by Andy Townshend

Content

My organization is looking to integrate our ticket satisfaction survey experience into our Ticket Detail page.

After a customer logs into their account page that displays all of their tickets, clicking a ticket here opens the Ticket Detail page which displays the message thread and some ticket data.

Currently when one of our agent sets a customer's ticket to solved they are shortly sent an invitation to a survey. Instead, we would like this button to be embedded on the Ticket Detail page once it is set to solved, so that it is available to the customer when reading their answer - this also ensures that they have seen their answer before the option to be surveyed. But when clicking the survey button, rather than refreshing or opening a new page when the button is clicked, we want to expand a section on the current page to show the survey questions. We are aware of how to make the button into a link, but prefer the customer experience of staying on the current page.

I am seeking to input their selections to the database using the Connect PHP api, but I couldn't locate anything related to the survey table on the Connect Object Explorer. I know the Question IDs and values I am attempting to send, but can't find the correct tables.

Does anyone have any clues as to how to manually write survey answers to the Survey Sessions table without following the survey link and submitting through that?

Version

Customer Portal - Framework 3.6

↧

ROQL to get Home Phone number without a where clause (11 Comments)

March 30, 2016, 8:32 pm

≫ Next: CreatedTime and UpdatedTime in Account table are blank (2 Comments)

≪ Previous: Post survey response values to Survey Sessions table without survey link (1 Comment)

Topic by Priya Gopal

Hi All,

Can you please help me to get a Home Phone number of a Contact using a ROQL Column mapping and without a where clause?

Any help is much appreciated.

Thanks,

Priya

↧

CreatedTime and UpdatedTime in Account table are blank (2 Comments)

February 19, 2018, 7:05 am

≫ Next: Does queryResult (Rest API method) escape ROQL queries? (3 Comments)

≪ Previous: ROQL to get Home Phone number without a where clause (11 Comments)

Topic by Simon Kilgarriff

Content

Hi all,

I'm not the most technical so bear with me. For an integration/SSO solution I need to query the accounts table and pull up a list of account created/edited between a certain time - so i get my delta. To start with I've built a query to show all accounts:

select name.first, name.last, login, emails.address, updatedtime, createdtime from Account

This is where my problems start. I'm getting no data returned for updatedtime or createdtime (see screen shot). If I switch to another table (contact, incident, organization) i get data. I know the Accounts table doesn't have an explicit created or updated field in it according to data dictionary - however in the agent desktop editing an account and clicking audit log shows there is data present.

I've tried the query on my dev sites and prod in case it was something like that but the result is the same. I've also tried the query on another version site which is separate and I get the same there.

Is there something different I should be doing or has anyone got a workaround?

I appreciate your thoughts.

Simon

Version

May 17

Code Block

select name.first, name.last, login, emails.address, updatedtime, createdtime from Account

Image

↧

Does queryResult (Rest API method) escape ROQL queries? (3 Comments)

February 20, 2018, 3:47 am

≫ Next: Data import of strings with special characters - C# (1 Comment)

≪ Previous: CreatedTime and UpdatedTime in Account table are blank (2 Comments)

Topic by William Sando

Hi there,

I am calling: this rest endpoint. We are sending in the following query (url encoded):

SELECT *
FROM Contacts
WHERE Contacts.Emails.Address = '`+email+`' LIMIT 1

Where email is entered by the client as thus potentially dangerous. I've tried escaping any single quotes present in email with another single quote (as recommended elsewhere on the forums), however I get a 400 bad request, so am I correct in assuming that I can defer the escaping and assume the REST endpoint will handle that?

Thanks

↧

Data import of strings with special characters - C# (1 Comment)

February 20, 2018, 11:06 pm

≫ Next: ROQL Sentence fetches wrong value

≪ Previous: Does queryResult (Rest API method) escape ROQL queries? (3 Comments)

Topic by Rejitha T

Hi All,

I am trying to import data to RightNow using REST web service C# code. The data contains special characters like "ç" ."ã", etc. The data is getting imported with "?" in place of special character. I need to insert the data without changing the special characters to RightNow.

Could anyone help me on this.

Thanks in Advance,

Rejitha

↧

ROQL Sentence fetches wrong value

February 21, 2018, 2:09 am

≫ Next: I want to automatically update Spam filtering on mailboxes

≪ Previous: Data import of strings with special characters - C# (1 Comment)

Topic by chidambaram CT

Flag1 & Flag2 is yes/no fields. Default value for flag2 is 'yes' before, now we changed to 'No value'.

I want fetch contact record with below mentioned 2 conditions

Condition 1 : flag1 is yes
Condition 2 : flag2 is no value (Default value) or flag2 is yes

select ID,Contact.CustomFields.c.flag1,
Contact.CustomFields.c.flag2 from Contact
where Contact.CustomFields.c.flag1==1 AND (Contact.CustomFields.c.flag2 != 0 or Contact.CustomFields.c.flag2 == 'null') order by ID

In the above ROQL, even flag2 is equal to zero is also fetched. What is wrong in this ROQL sentence?

↧

I want to automatically update Spam filtering on mailboxes

February 21, 2018, 2:51 am

≫ Next: Is ROQL injection possible with single quote?

≪ Previous: ROQL Sentence fetches wrong value

Topic by David Ritchie

Content

Hi,

I'm trying to figure out if there is a way to update the mailbox filtering options on OSvC. If I look in the data dictionary I can see the table Mailboxes and it has discard fields such as discard_addrs, discard_body etc. But when I try and report on this table (well mailbox) these fields do not appear in the list, and they can't be queried using ROQL. Is this just a case that they have to be maintained manually or is there some way I don't know about where an agent can mark a domain as a spam domain and this list is automatically updated?

Cheers,

Dave

Version

17D

↧

Is ROQL injection possible with single quote?

February 21, 2018, 3:46 am

≫ Next: RightNow call from java using v1.3 results in "Data element in the Message is NULL" message (1 Comment)

≪ Previous: I want to automatically update Spam filtering on mailboxes

Topic by William Sando

I am calling: this rest endpoint. We are sending in the following query (url encoded). "email" is sent from users, so potentially dangerous.

SELECT *
FROM Contacts
WHERE Contacts.Emails.Address = '`+email+`' LIMIT 1

Do I need to ensure that email is escaped? I.E we are currently allowing user to input a single quote, could this be used maliciously to achieve ROQL injection?

↧

RightNow call from java using v1.3 results in "Data element in the Message is NULL" message (1 Comment)

January 8, 2018, 8:02 am

≫ Next: Is it possible to access the value of a column of a table in Agent Desktop? (1 Comment)

≪ Previous: Is ROQL injection possible with single quote?

Topic by Victor Chirita

Content

Hello everybody, I am noob with RightNow and I am trying to understand what is going on when calling the API to retrieve some data.

I have a simple select query with CustomFields, executed using wsdl 1.3 definition, like this:

        Holder<CSVTableSet> queryCSV = new Holder<>();
        Holder<byte[]> b = new Holder<>();
        client.queryCSV(queryString, PAGE_SIZE,",",false,true, queryCSV, b);

where query is like this

SELECT C.Emails.Address,
       C.CustomFields.c.Storerefnum,
       C.CustomFields.c.retailername,C.CustomFields.Retailer.contact_name,
       C.CustomFields.Retailer.house_number,C.CustomFields.Retailer.Street1,
       C.CustomFields.Retailer.Street2,C.CustomFields.Retailer.City,C.CustomFields.Retailer.postal_code,
       C.CustomFields.Retailer.Country,C.CustomFields.Retailer.retailer_inbound_service,C.CustomFields.Retailer.phone_number,
       C.CustomFields.Retailer.Billing.Street1,C.CustomFields.Retailer.Billing.Street2,C.CustomFields.Retailer.Billing.City,
       C.CustomFields.Retailer.Billing.PostalCode,C.CustomFields.Retailer.Billing.Country,C.CustomFields.Retailer.Billing.VATnumber,
       C.CustomFields.Retailer.Billing.PhoneNumber,C.CustomFields.Retailer.Billing.BillingEntityName,C.CustomFields.Retailer.Billing.Email,
       C.CustomFields.Retailer.Billing.ContactName FROM Contact C WHERE Contact.PrimaryContactIncidents.ReferenceNumber = '***-***' AND C.Emails.AddressType = 0

and pagesize = 10;

When the query is run from java, I get: javax.xml.ws.soap.SOAPFaultException: Data element in the Message is NULL

What could be wrong?

Version

RightNow Api 1.3

↧

Is it possible to access the value of a column of a table in Agent Desktop? (1 Comment)

February 22, 2018, 5:29 am

≫ Next: ICS RightNow connection issue

≪ Previous: RightNow call from java using v1.3 results in "Data element in the Message is NULL" message (1 Comment)

Topic by Ioannis Lalousis

Content

So I have made an autocomplete for the KeywordText widget using awesomplete. The thing is I want the results to be in order of which questions are most popular. From what I gathered the static_score or the solve_count in the FAQs(asnwers) Table in Agent Desktop is a way to sort the answers. Is it possible to get those values for each answer?

P.S. Now I am taking the answers through ROQL and place them in a list which I search through javascript as the user is typing.

Version

3.6.2

Code Block

<script>
    var input = document.getElementById("rn_KeywordText_0_Text");
    var awesomplete = new Awesomplete(input, {
    minChars: 1,
    maxItems: 3,
    list: [<?
/* Check if sub domain lang to change query for a specific lang */
        $lang = "'en_US'";
        try{
            $query = "SELECT A.ID, A.Summary, A.Language.name as LanguageID, A.StatusWithType.StatusType.name as StatusType FROM Answer A where A.Language.name = ".$lang." LIMIT 250 OFFSET 0";
            $roql_res = RightNow\Connect\v1_3\ROQL::query($query)->next();

            while($res = $roql_res->next()) {
                echo "\"";
                echo $res['Summary'];
                echo "\",";
            }
        }catch(Exception $ex){
        }
        ?>]
    });</script>

↧

ICS RightNow connection issue

February 22, 2018, 2:36 pm

≫ Next: C# code to create an incidents on RightNow (4 Comments)

≪ Previous: Is it possible to access the value of a column of a table in Agent Desktop? (1 Comment)

Topic by Victor Martins de Castro

Content

Hello, I am trying to create a connection with ICS's RightNow adapter but it is not working. After I fill in the WSDL URL, Credentials and click Test, it processes for almost 5 minutes only to return this error message(in portuguese):

Não é possível testar a conexão "INFINITY_TEST". [Cause: CASDK-0001]

CASDK-0001: Ocorreu um timeout ao tentar estabelecer conexão com https://infinity--tst2.custhelp.com/services/soap/connect/soap?wsdl=typed

WSDLException: faultCode=PARSER_ERROR: Failed to read wsdl file at: "https://infinity--tst2.custhelp.com/services/soap/connect/soap?wsdl=typed", caused by: java.net.SocketTimeoutException.: java.net.SocketTimeoutException: Read timed out
Read timed out

I have already changed EVENT_NOTIFICATION_ENABLED to 'yes', and setup username and password at EVENT_NOTIFICATION_MAPI_PASSWD and EVENT_NOTIFICATION_MAPI_USERNAME, which are the credential I am using on ICS.

Is there anything I am missing to make this connection work?

Version

Integration Cloud Service

↧

C# code to create an incidents on RightNow (4 Comments)

February 26, 2018, 1:55 pm

≫ Next: C# Code to create custom object on RightNow (2 Comments)

≪ Previous: ICS RightNow connection issue

Topic by SAJI MATHEW

Content

Here I’m sharing the C# code to create incidents on RightNow. I think this code snippet will be helpful for those who wants to integrate 3^rd party .Net application with RightNow CRM.

Code Block

using System;
using System.Collections.Generic;
using System.Linq;
using System.Text;
using System.Threading.Tasks;
using CreateOppertunity.OSCReference;

namespace CreateOppertunity
{
    class createIncident
    {
        private RightNowSyncPortClient _service;

        public createIncident()
        {
            _service = new RightNowSyncPortClient();
            _service.ClientCredentials.UserName.UserName = "webservice";
            _service.ClientCredentials.UserName.Password = "Webservice@123##";

        }

        private Incident _createNewIncident()
        {
            Incident incident = new Incident();
            /*Contact contact = new Contact();

            ID contactID = new ID();
            //CRM Contact Id
            contactID.id = 162;
            contactID.idSpecified = true;
            contact.ID = contactID;*/



            IncidentContact incContact = new IncidentContact();
            NamedID contactNamedID = new NamedID();
            contactNamedID.ID = new ID();
            //CRM contact Id goes here
            contactNamedID.ID.id = 162;
            contactNamedID.ID.idSpecified = true;
            incContact.Contact = contactNamedID;
            incident.PrimaryContact = incContact;

            incident.Subject = "New Oppertunity from C#";

            incident.CustomFields = new GenericObject();
            incident.CustomFields.GenericFields = new GenericField[6];
            incident.CustomFields.GenericFields[0] = createIncidentCustomFields("billing_number", "BILL001");
            incident.CustomFields.GenericFields[1] = createIncidentCustomFields("payment_method", "NET Banking");
            incident.CustomFields.GenericFields[2] = createIncidentCustomFields("cart_amount", "5400.00");
            incident.CustomFields.GenericFields[3] = createIncidentCustomFields("sender_phone", "9745634567");
            incident.CustomFields.GenericFields[4] = createIncidentCustomFields("senderemail", "senderemail@email.com");
            incident.CustomFields.GenericFields[4] = createIncidentCustomFields("sendername", "Sender Name");
            incident.CustomFields.ObjectType = new RNObjectType();
            incident.CustomFields.ObjectType.TypeName = "IncidentCustomFields";






            return incident;
        }




        /*create custom field of type string*/
        private GenericField createIncidentCustomFields(string strFldName, string strFldValue)
        {
            GenericField customField = new GenericField();
            customField.name = strFldName;
            customField.dataType = DataTypeEnum.STRING;
            customField.dataTypeSpecified = true;
            customField.DataValue = new DataValue();
            customField.DataValue.Items = new object[1];
            customField.DataValue.ItemsElementName = new ItemsChoiceType[1];
            customField.DataValue.Items[0] = strFldValue;
            customField.DataValue.ItemsElementName[0] = ItemsChoiceType.StringValue;

            GenericObject customFieldsc = new GenericObject();
            customFieldsc.GenericFields = new GenericField[1];
            customFieldsc.GenericFields[0] = customField;
            customFieldsc.ObjectType = new RNObjectType();
            customFieldsc.ObjectType.TypeName = "IncidentCustomFields";

            GenericField cField = new GenericField();
            cField.name = "c";
            cField.dataType = DataTypeEnum.OBJECT;
            cField.dataTypeSpecified = true;
            cField.DataValue = new DataValue();
            cField.DataValue.Items = new object[1];
            cField.DataValue.Items[0] = customFieldsc;
            cField.DataValue.ItemsElementName = new ItemsChoiceType[1];
            cField.DataValue.ItemsElementName[0] = ItemsChoiceType.ObjectValue;


            return cField;
        }

        public long _createIncident()
        {
            Incident incident = _createNewIncident();
            ClientInfoHeader clientInfoHeader = new ClientInfoHeader();
            clientInfoHeader.AppID = "CreateIncident";
            CreateProcessingOptions createProcessingOptions = new CreateProcessingOptions();
            createProcessingOptions.SuppressExternalEvents = false;
            createProcessingOptions.SuppressRules = false;

            RNObject[] createObjects = new RNObject[] { incident };
            RNObject[] createResults = _service.Create(clientInfoHeader, createObjects, createProcessingOptions);

            //incident = createResults[0] as Incident;
          


            return createResults[0].ID.id;

        }


        static void Main(string[] args)
        {
            createIncident _incident = new createIncident();
            // try{

            long newIncidentId = _incident._createIncident();

            Console.WriteLine("New Incident created with ID : " + newIncidentId);
            /*  }
              catch(Exception ex){
                  Console.WriteLine("Exception caught", ex.Message);
              }*/

            Console.Read();
        }
    }
}

File

createIncident.cs(5KB)

↧

C# Code to create custom object on RightNow (2 Comments)

February 26, 2018, 2:03 pm

≫ Next: OSC-CREST-00025

≪ Previous: C# code to create an incidents on RightNow (4 Comments)

Topic by SAJI MATHEW

Content

I think most of the developers come across the requirement to integrate third-party application with RN system. Sometimes we might need to create entries in the Custom object. Here is the sample code to create custom object entries in RN CO.

Code Block

using System;
using System.Collections.Generic;
using System.Linq;
using System.Net;
using System.Text;
using System.Threading.Tasks;
using UpdateOrderHistory.OSCReference;
using System.Net.Security;
using System.Security.Cryptography.X509Certificates;

namespace UpdateOrderHistory
{
    class UpdateEXOrderHistory
    {
        private RightNowSyncPortClient _service;



        public UpdateEXOrderHistory()
        {
            _service = new RightNowSyncPortClient();
            _service.ClientCredentials.UserName.UserName = "xxxxx";
            _service.ClientCredentials.UserName.Password = "xxxxxxx";
            SetCertificatePolicy();
        }

        public static void SetCertificatePolicy()
        {

            ServicePointManager.ServerCertificateValidationCallback

                       += RemoteCertificateValidate;

        }

        private static bool RemoteCertificateValidate(

       object sender, X509Certificate cert,

        X509Chain chain, SslPolicyErrors error)
        {

            // trust any certificate!!!

            return true;

        }

        private GenericObject updateOrder()
        {
            GenericObject orderHistoryGO = new GenericObject();

            RNObjectType orderHistoryObjType = new RNObjectType();
            orderHistoryObjType.Namespace = "CO";
            orderHistoryObjType.TypeName = "OrderHistory";
            orderHistoryGO.ObjectType = orderHistoryObjType;


            ID orderHistID = new ID();
            //CRM Order History Id
            orderHistID.id = 37;
            orderHistID.idSpecified = true;
            orderHistoryGO.ID = orderHistID;


            List<GenericField> orderHistoryFlds = new List<GenericField>();


            orderHistoryFlds.Add(createGenericField("OrderNumber", ItemsChoiceType.StringValue, "ORD001"));
            orderHistoryFlds.Add(createGenericField("ShippingMode", ItemsChoiceType.StringValue, "Direct"));
            orderHistoryFlds.Add(createGenericField("RecipientName", ItemsChoiceType.StringValue, "Raman Singh"));
            orderHistoryFlds.Add(createGenericField("RecipientCity", ItemsChoiceType.StringValue, "Noida"));
            orderHistoryFlds.Add(createGenericField("OrderStatus", ItemsChoiceType.StringValue, "Confirmed"));
            orderHistoryFlds.Add(createGenericField("orderAmount", ItemsChoiceType.StringValue, "5500.50"));
            orderHistoryFlds.Add(createGenericField("SubOrderNumber", ItemsChoiceType.StringValue, "SUBOR09"));
            orderHistoryFlds.Add(createGenericField("RecipientPhone", ItemsChoiceType.StringValue, "87675466"));
            orderHistoryFlds.Add(createGenericField("SubOrderStatus", ItemsChoiceType.StringValue, "confirmed"));
            orderHistoryFlds.Add(createGenericField("Timeslot_startTime", ItemsChoiceType.StringValue, "9:00:00"));
            orderHistoryFlds.Add(createGenericField("Timeslot_endTime", ItemsChoiceType.StringValue, "11:00:00"));
            orderHistoryFlds.Add(createGenericField("senderName", ItemsChoiceType.StringValue, "Update Sender"));
            orderHistoryFlds.Add(createGenericField("senderPhone", ItemsChoiceType.StringValue, "8878990"));
            orderHistoryFlds.Add(createGenericField("senderEmail", ItemsChoiceType.StringValue, "updateSender@ymail.com"));

           orderHistoryFlds.Add(createGenericField("DeliveryDateTime",ItemsChoiceType.DateTimeValue,Convert.ToDateTime("2015-01-08T15:53:44.00")));
           orderHistoryFlds.Add(createGenericField("OrderDateTime", ItemsChoiceType.DateTimeValue, Convert.ToDateTime("2015-01-08T15:53:44.00")));
           orderHistoryGO.GenericFields = orderHistoryFlds.ToArray();

            return orderHistoryGO;




        }

        private GenericField createGenericField(string Name, ItemsChoiceType itemsChoiceType, object Value)
        {
            GenericField orderHistoryFld = new GenericField();
            orderHistoryFld.name = Name;
            orderHistoryFld.DataValue = new DataValue();
            orderHistoryFld.DataValue.ItemsElementName = new ItemsChoiceType[] { itemsChoiceType };
            orderHistoryFld.DataValue.Items = new object[] { Value };
            return orderHistoryFld;
        }


        public void _updateOrderHistory()
        {
            GenericObject orderHistory = updateOrder();

            ClientInfoHeader clientInfoHeader = new ClientInfoHeader();
            clientInfoHeader.AppID = "UpdateOrder";
            UpdateProcessingOptions options = new UpdateProcessingOptions();
            options.SuppressExternalEvents = false;
            options.SuppressRules = false;




            RNObject[] objects = new RNObject[] { orderHistory };
            _service.Update(clientInfoHeader, objects, options);
        }



        static void Main(string[] args)
        {
            UpdateEXOrderHistory _updateorder = new UpdateEXOrderHistory();
            /*try
            {*/

                _updateorder._updateOrderHistory();

                Console.WriteLine("order updated");
       /*     }
            catch (Exception ex)
            {
                Console.WriteLine("Exception caught", ex.Message);
            }

            Console.Read();
        */
        }
    }
}

File

UpdateEXOrderHistory.cs(5KB)

↧

OSC-CREST-00025

February 27, 2018, 11:33 am

≫ Next: Connect Web Services for SOAP and C# (2 Comments)

≪ Previous: C# Code to create custom object on RightNow (2 Comments)

Topic by JJ

Hi,

Recently upgraded to Nov 2017. When we now try and access the REST API, e.g. /services/rest/connect/v1.4/incidents/ we get the following

{"type":"***/services/rest/connect/exceptions/OSC-CREST-00025","title":"Bad Request","status":200,"detail":"Request could not be understood by the server. Please modify your query and try again.","instance":"***/services/rest/connect/exceptions/OSC-CREST-00025","o:errorCode":"OSC-CREST-00025"}

Any reason?

↧

Connect Web Services for SOAP and C# (2 Comments)

February 27, 2018, 12:26 pm

≫ Next: CPM Test Harness Functionality (2 Comments)

≪ Previous: OSC-CREST-00025

Topic by jmastria

Content

I am attempting to use the SOAP service to create a contact in RightNow. I have looked through the samples and downloaded some sample code and configured my service reference to https://integration-test.rightnowdemo.com/services/soap/connect/soap?wsdl=typed which worked fine.

Now all I want to do is to get my code to compile but the create method is requiring 5 parameters instead of the 3 that came with the sample code.

Even a recent post is showing three parameters for a create method?

http://communities.rightnow.com/posts/649557284e

Anyone know what I need to do to get this to work?

Thanks

Joe

Code Block

 public long CreateContact()
        {
            Contact newContact = populateContactInfo();
            //Set the application ID in the client info header
            ClientInfoHeader clientInfoHeader = new ClientInfoHeader();
            clientInfoHeader.AppID = ".NET Getting Started";
            //Set the create processing options, allow external events and rules to execute
            CreateProcessingOptions createProcessingOptions = new CreateProcessingOptions();
            createProcessingOptions.SuppressExternalEvents = false;
            createProcessingOptions.SuppressRules = false;
            RNObject[] createObjects = new RNObject[] { newContact };
            //Invoke the create operation on the RightNow server
            RNObject[] createResults = _service.Create(clientInfoHeader, createObjects, createProcessingOptions);

            //We only created a single contact, this will be at index 0 of the results
            newContact = createResults[0] as Contact;
            return newContact.ID.id;
        }




Here is what it is expecting:



Create(GettingStarted.RightNowService.ClientInfoHeader ClientInfoHeader, GettingStarted.RightNowService.APIAccessRequestHeader APIAccessRequestHeader, GettingStarted.RightNowService.RNObject[] RNObjects, GettingStarted.RightNowService.CreateProcessingOptions ProcessingOptions, out GettingStarted.RightNowService.RNObject[] RNObjectsResult)

↧

CPM Test Harness Functionality (2 Comments)

February 27, 2018, 4:08 pm

≫ Next: Is ROQL injection possible with single quote? (4 Comments)

≪ Previous: Connect Web Services for SOAP and C# (2 Comments)

Topic by Duncan Taylor

Content

I avoided asking this question in here because I had a ticket in with Oracle TS. But I have not received an answer from them so I'm going to ask here.

Does anyone actually know how the Test Harness functionality works? The documentation for this is practically non-existent aside from a tips FAQ.

I'm getting a bunch of errors I have no idea how to fix because I have no idea what the harness is doing. What I'm looking for is an explanation which looks like the following:

"The test harness will first run the setup function. Next it will loop through run the fetchObject function once. If the return value is an array it will run the validate function once for each value in the array. The cleanup function will be run once after each validate operation. It is passed 1 parameter which is the object which was used in the validate function."

The above is obviously NOT how it works, but I'm hoping someone can correct this based on what they've figured out.

Version

17D

↧

Is ROQL injection possible with single quote? (4 Comments)

February 21, 2018, 3:46 am

≫ Next: C# Report Returns Incorrect Data (4 Comments)

≪ Previous: CPM Test Harness Functionality (2 Comments)

Topic by William Sando

I am calling: this rest endpoint. We are sending in the following query (url encoded). "email" is sent from users, so potentially dangerous.

SELECT *
FROM Contacts
WHERE Contacts.Emails.Address = '`+email+`' LIMIT 1

Do I need to ensure that email is escaped? I.E we are currently allowing user to input a single quote, could this be used maliciously to achieve ROQL injection?

↧