SQL Statements send to Omnis Server?

Josua Riha riha at bnitm.de
Wed Dec 11 04:15:11 EST 2013


I've just received an email from the developers and they explained the
code to me.
It just looks like an external request, but the wrapper catches the
request to work with it and needs a valid URL.
They said they will probably change the URL to something like
http://omnis_iOS_internal_message.com.


Am 10.12.13 18:33, schrieb Ben Butler:
> Hi, 
>
> My guess would be legacy experimental code that a developer has forgotten about and not taken out.   This would quickly DoS their own server and there are smarter ways to handle licensing monitoring.  Plus it will generate an a level of extra garbage traffic.  You could always mod the js client... 
>
> Ben
> -- Sent from my Android device with K-9 Mail. Please excuse my
> brevity. "Phil Potter (ou)" <Phil at pgpotter.demon.co.uk> wrote:
>> >Hi,
>> >
>> >If you are doing an insert or update, are the field contents also 
>> >visible, and sent to omnis.net?
>> >
>> >regards
>> >Phil.
>> >
>> >On 10/12/2013 17:00, Gary Connor wrote:
>>> >> Just what I'm thinking, not stated as a known fact.
>>> >> ________________________________
>>> >> Dr. Gary Connor, PhD, CIO
>>> >> DirectLine Technologies, Inc.
>>> >> 1600 N. Carpenter Road
>>> >> Building D
>>> >> Modesto, CA 95351
>>> >> (209) 491-2020
>>> >>
>>>> >>> That would be possible but why do they need the whole statement for
>>>> >>> that? Wouldn't be a special ID identifying your license better?
>>>> >>>
>>>>> >>>> I'm waiting for someone else to say what I'm thinking -
>>>>> >>>> "Licensing control."
>>>>> >>>>
>>>>> >>>> Just a guess, but there is no other reason for any code to pass
>>>>> >>>> through the vendor's network for basic functionality.  Since we
>>>>> >>>> had the long discussions about the new licensing necessitated
>>>>> >>>> (especially) by serverless ios apps.
>>>>> >>>> ________________________________
>>>>> >>>> Dr. Gary Connor, PhD, CIO
>>>>> >>>> DirectLine Technologies, Inc.
>>>>> >>>> 1600 N. Carpenter Road
>>>>> >>>> Building D
>>>>> >>>> Modesto, CA 95351
>>>>> >>>> (209) 491-2020
>>>>> >>>>
>>>>>> >>>>> Hello,
>>>>>> >>>>>
>>>>>> >>>>> I have noticed that my SQL queries are being send to omnis.net.
>>>>>> >>>>> Is there a reason why all my SQL statements have to be send to
>>>>>> >>>>> that server?
>>>>>> >>>>>
>>>>>>> >>>>>>  From omjsclnt.js (Javascript Wrapper IOS V1.1):
>>>>>>> >>>>>>
>>>>>> >>>>> _33 contains my whole SQL Statement for example:
>>>>>> >>>>>
>>>>>> >>>>>
>> >"{"ID":"ExecuteSQL","ULID":"execute","retID":{"ACTION":"execute","SRID
>>>>>> >>>>> ":2,"PSRID":0},"Params":{"SqlText":"CREATE
>>>>>> >>>>> TABLE IF NOT EXISTS user (user_id INTEGER PRIMARY KEY, username
>>>>>> >>>>> CHAR(50), password CHAR(200), role INTEGER(2));"}}"
>>>>>> >>>>>
>>>>>> >>>>> if(jOmnis.iOS){
>>>>>> >>>>> _33=_33.replace(/[\\]/g,"%5C");
>>>>>> >>>>>
>>>>>> >>>>> var _34=document.createElement("IFRAME");
>>>>>> >>>>>
>>>>>> >>>>>
>> >_34.setAttribute("src","http://www.omnis.net/iOSJavaScriptURL"+_33);
>>>>>> >>>>>
>>>>>> >>>>> document.documentElement.appendChild(_34);
>>>>>> >>>>>
>>>>>> >>>>> _34.parentNode.removeChild(_34);
>>>>>> >>>>>
>>>>>> >>>>> _34=null;
>>>>>> >>>>> }
>>>>>> >>>>>
>>>>>> >>>>>
>>>>>> >>>>> I'm using a serverless client application and noticed this
>>>>>> >>>>> while debugging.
>>>>>> >>>>>
>>>>>> >>>>> Regards,
>>>>>> >>>>> Josua
>>>>>> >>>>> _____________________________________________________________
>>>>>> >>>>> Manage your list subscriptions at http://lists.omnis-dev.com
>>>>>> >>>>>
>>>>> >>>> ------------------------------------------------------------------
>>>>> >>>> ---------------------- The information contained in this email
>>>>> >>>> and any attachments is confidential and may be subject to
>>>>> >>>> copyright or other intellectual property protection. If you are
>>>>> >>>> not the intended recipient, you are not authorized to use or
>>>>> >>>> disclose this information, and we request that you delete the
>>>>> >>>> original message from your mail system.
>>>>> >>>> _____________________________________________________________
>>>>> >>>> Manage your list subscriptions at http://lists.omnis-dev.com
>>>>> >>>>
>>>>> >>>>
>>>> >>> _____________________________________________________________
>>>> >>> Manage your list subscriptions at http://lists.omnis-dev.com
>>> >>
>>> >>
>> >----------------------------------------------------------------------------------------
>>> >> The information contained in this email and any attachments is
>> >confidential
>>> >> and may be subject to copyright or other intellectual property
>> >protection.
>>> >> If you are not the intended recipient, you are not authorized to use
>> >or disclose
>>> >> this information, and we request that you delete the original message
>> >from
>>> >> your mail system.
>>> >> _____________________________________________________________
>>> >> Manage your list subscriptions at http://lists.omnis-dev.com
>>> >> .
>>> >>
>>> >>
>>> >> -- 
>>> >> Phil Potter
>>> >> Based in Chester in the UK.
>> >_____________________________________________________________
>> >Manage your list subscriptions at http://lists.omnis-dev.com
> _____________________________________________________________
> Manage your list subscriptions at http://lists.omnis-dev.com
>




More information about the omnisdev-en mailing list