aXes User Forum

Hi,

I am getting this error when I am trying to login to project in axes developer tool. Has anyone previously encountered this error message?

Hi

I had a similar error. There are a few small issues with preventing injection attacks in the SQL load of the datatables. Many of them have been fixed and you should upgrade to the latest EPC to see if the problem still persists.

The problem is associated with the new engine that uses JSM. Using the older engine should not have this issue.

Tim

Does anyone know of a resolution to this issue? I have a customer running into an error that looks to be just like this issue. One of the replies to this issue talks about the issue being associated with SQL Injections. Does anyone know how to fix that?

Hi Luis

The script injection bit was from Alec explaining the issue back in 2019. If you are still on aXes 4.20 then one of the patches 162592, 162617, 162744 or 7644486 will fix this, I can't remember which one fixed it. It's been a while.

If you upgrade to 420001 or 421000 then the the issue should not exist.

Tim

Hi Tim,
Thanks for the info. However, this customer is on 4.21.001, so I don't think your comments are relevant to this customer's situation. However, I think I've found the problem. If the AXES profile is disabled, or enabled with an expired password, you will get this error. I'm able to replicate this myself. Actually, it looks like this will occur in any aXesJSM environment where the AXES profile is either disabled or has its password expired, by simply running the following hello world code sample:

TABLEMANAGER.loadStaticTables("tables_static.txt", null, false);
var oTable = TABLEMANAGER.getTable("ISOCurrency");
alert(oTable.childCount());

I'm pretty sure once this customer gets the authority to change the AXES profile's password, this customer will be ok.