12: path varchar2(2000);
13:
14: begin
15: -- Get package being executed.
16: curproc := upper(owa_util.get_procedure);
17:
18: if (curproc is null) then
19: -- Must be from a path alias.
20: -- Get the path alias instead, and check that it is in the
18: if (curproc is null) then
19: -- Must be from a path alias.
20: -- Get the path alias instead, and check that it is in the
21: -- authorized list.
22: curproc := upper(owa_util.get_cgi_env('PATH_ALIAS'));
23: else
24: -- Check that a schema hasn't been added to the package in the path
25: -- PATH_INFO should be '/package.proc?
26: path := upper(owa_util.get_cgi_env('PATH_INFO'));
22: curproc := upper(owa_util.get_cgi_env('PATH_ALIAS'));
23: else
24: -- Check that a schema hasn't been added to the package in the path
25: -- PATH_INFO should be '/package.proc?
26: path := upper(owa_util.get_cgi_env('PATH_INFO'));
27: if (instr(path, curproc) <> 2) then
28: owa_sec.set_protection_realm('SECURITY ERROR:'||curproc||':');
29: return FALSE;
30: end if;