Home | Contact Us | FAQ | Search & Site Map | Link to Us
Sign In | Join | Other 45 Sites in Network
HomeAnnouncementsWhite Papers
Discussion GroupsFirst AidDatabasesJavaBeansGUIJava 3DVirtual MachineCORBASecurityToolsGeneral
Java DirectoryOpen Source ProjectsSample Book ChaptersUser GroupsWeb Resources
Related Topics
Databases.NETMore Topics ...

Java Forum / Databases / November 2003

Tip: Looking for answers? Try searching our database.

applet & security

Thread view: 
vertigo - 30 Nov 2003 17:12 GMT
Hello
    I have to connect from my applet to mysql server with administrative
privileges (login & password are in applet's code). I connect using
mysql-connector:

try{Class.forName("com.mysql.jdbc.Driver").newInstance();}
        catch(Exception e) {System.out.println("Error");}
String url = new String("jdbc:mysql://IP:3306/base?user=u1&password=u1");
        connection = DriverManager.getConnection(url);

1 question: are there any tools which could "encrypt" my applet so that
it could not be so easily decompiled (to get root password) ??

2 question: does my applet connect to mysql server and send
login/password in clear text, or encrypted ? (mysqld 4.0).

Thanx
Paul Thomas - 30 Nov 2003 23:23 GMT
> Hello
>     I have to connect from my applet to mysql server with administrative
[quoted text clipped - 12 lines]
> 2 question: does my applet connect to mysql server and send
> login/password in clear text, or encrypted ? (mysqld 4.0).

There are tools which can obfuscate Java classes but I can't vouch for
effective they are. Can't you just get the user to input the password?


Signature

Paul Thomas
+------------------------------+---------------------------------------------+

| Thomas Micro Systems Limited | Software Solutions for the Smaller Business |
| Computer Consultants         | http://www.thomas-micro-systems-ltd.co.uk   |
+------------------------------+---------------------------------------------+


Free Magazines

Get these publications absolutely FREE for up to 12 months. There are no hidden fees and no obligation. Simply choose a title, complete the application form and submit it. Read more ...

Oracle MagazineNetwork ComputingComputer WorldBio-IT WorldeWeekInformation WeekInfosecurity
 
Sign In
Join
My Latest Posts
My Monitored Threads
My Blog
My Photo Gallery
My Profile
My Homepage

Start New Thread
Enable EMail Alerts
Rate this Thread



©2008 Advenet LLC   Privacy Policy - Terms of Use
This website includes both content owned or controlled by Advenet as well as content owned or controlled by third parties.