Databases Reference
In-Depth Information
Securing the web listener
Oracle Application Express utilizes a web browser on the user's computer,
communicating through a web server to the Oracle database.
There are three distinct architectures that can be deployed for Oracle
Application Express:
1.
Using Oracle HTTP application server with MOD/PLSQL.
2.
Using XDB HTTP protocol server with the embedded PL/SQL
gateway (EPG).
3.
Using the Oracle Application Express Listener against:
° Oracle WebLogic
° GlassFish
° OC4J
There is one golden rule: Give away as little as possible about your environment.
Don't publicize names/versions of your running software.
HTTP server
The following screenshot shows the HTTP server request processing:
When the HTTP server is installed on a different machine, it will be more secure
because the database and HTTP server are separated from each other.
The HTTP server gives full lexibility with rewrite rules, access rules, and so on.
