Java Help
 
Forums: » Register « |  User CP |  Games |  Calendar |  Members |  FAQs |  Sitemap |  Support | 
User Name:
Password:
Remember me
Go Back   Dev Shed Forums > Programming Languages > Java Help
Reload this Page

JSP-DW-connection files prob

Discuss JSP-DW-connection files prob in the Java Help forum on Dev Shed.
JSP-DW-connection files prob Java Help forum discussing all Java platforms - J2ME, J2SE and J2EE - as well as relevant standards, APIs and frameworks such as Swing, Servlets, JSPs, Applets, Struts, Spring, Hibernate, ANT, EJB, and other Java-related topics.

Reply
Add This Thread To:
  Del.icio.us   Digg   Google   Spurl   Blink   Furl   Simpy   Y! MyWeb 
« Previous Thread | Next Thread »  
Thread Tools Search this Thread Rate Thread Display Modes
 
Unread Dev Shed Forums Sponsor:
  #1  
Old January 31st, 2003, 08:16 AM
DuncanH DuncanH is offline
Contributing User
Dev Shed Newbie (0 - 499 posts)
  
Join Date: Dec 2002
Posts: 39 DuncanH User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 6
JSP-DW-connection files prob
hope someone can help...
I use Dreamweaver MX to create JSP files to connect to our Oracle databases. MX creates connection files (jsp) which (in plain text) show the username and password to Oracle, and our security guys really don't like that.

does anyone know a way we can obfuscate these files so people can't just come along and have free access to our databases?

cheers
Duncan
Reply With Quote
  #2  
Old January 31st, 2003, 11:16 AM
M.Hirsch M.Hirsch is offline
Contributing User
Dev Shed God 1st Plane (5500 - 5999 posts)
  
Join Date: Oct 2000
Location: Back in the real world.
Posts: 5,969 M.Hirsch User rank is First Lieutenant (10000 - 20000 Reputation Level)M.Hirsch User rank is First Lieutenant (10000 - 20000 Reputation Level)M.Hirsch User rank is First Lieutenant (10000 - 20000 Reputation Level)M.Hirsch User rank is First Lieutenant (10000 - 20000 Reputation Level)M.Hirsch User rank is First Lieutenant (10000 - 20000 Reputation Level)M.Hirsch User rank is First Lieutenant (10000 - 20000 Reputation Level)M.Hirsch User rank is First Lieutenant (10000 - 20000 Reputation Level)M.Hirsch User rank is First Lieutenant (10000 - 20000 Reputation Level) 
Time spent in forums: 1 Month 1 Day 22 h 42 m 50 sec
Reputation Power: 184
the question is how would people get this file?

i would read the data from a file that is outside your DocumentRoot. This prevents people from getting your password when the server should fail to run the JSP and deliver the sources.
Also if there is several people that are allowed to access this machine eg. via ftp, make an account especially for this file and let noone else access it.
Also a simple XOR encryption could already please your security admins.
Itīll be much harder if people have SSH / telnet / ?? connection. Do they?
__________________
--
Manuel Hirsch - Linux, FreeBSD, programming, administration articles, tutorials and more.
Reply With Quote
Reply

Viewing: Dev Shed Forums > Programming Languages > Java Help > JSP-DW-connection files prob

« Previous Thread | Next Thread »

Thread Tools  Search this Thread 
Search this Thread:

Advanced Search
Display Modes  Rate This Thread 
Linear Mode Linear Mode
Rate This Thread:


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
View Your Warnings | New Posts | Latest News | Latest Threads | Shoutbox
Forum Jump


Forums: » Register « |  User CP |  Games |  Calendar |  Members |  FAQs |  Sitemap |  Support | 
  
 





© 2003-2008 by Developer Shed. All rights reserved. DS Cluster 2 hosted by Hostway. 
Stay green...Green IT