Servlet security with database access

Article View: comp.lang.java.programmer

Article #472

Back to comp.lang.java.programmer Previous Next

#472

From: eherebonus
Date: Mon, 17 Jan 2000 00:00

12 lines
1272 bytes

I am using Apache Jserv for servlet engine, my servlet will access
databases on the web server, so I have to program the database login
and password into the servlet! The problem: is this secure? Since the
servlet directory has to be readable and execuable, some strangers can
just get the servlet class, decompile it, and get the login/password
for my database?

Any response will be appreciated.


Sent via Deja.com http://www.deja.com/
Before you buy.

Technical Details

Message-ID: <8608ne$2ii$1@nnrp1.deja.com>

Path: arc1-ca.pugleaf.net!unknown!not-for-mail

Show Full Headers

Complete Article Headers

X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: 115238,da65d672b0892627,start
X-Google-Attributes: gid115238,public
X-Google-Thread: 10a146,da65d672b0892627,start
X-Google-Attributes: gid10a146,public
From: eherebonus@my-deja.com
Subject: Servlet security with database access
Date: 2000/01/17
Message-ID: <8608ne$2ii$1@nnrp1.deja.com>
X-Deja-AN: 573920402
X-Http-Proxy: HTTP/1.1 sji-ca-cache[0A000002] (Traffic-Server/2.2 [uScMs f p eN:t cSMi p s ]), 1.0 x41.deja.com:80 (Squid/1.1.22) for client 165.236.189.201
Organization: Deja.com - Before you buy.
X-Article-Creation-Date: Mon Jan 17 23:30:54 2000 GMT
X-MyDeja-Info: XMYDJUIDeherebonus
Newsgroups: comp.lang.java.programmer,borland.public.jbuilder.servlet
X-Http-User-Agent: Mozilla/4.0 (compatible; MSIE 5.0; Windows NT)