Just getting started on servlets/jsp. I'm wondering about password
security a scenario like this:

basic setup
-----------------------
- servlet/jsp interface with data in a database (mysql)
- access is defined in mysql
- there's a database MyApp
- an 'NewUserAdmin' login capable of granting appropriate access for a
new user

scenario
----------------------
User visits site and submits request for a new account

problem
----------------------
If I make a db connection from a servlet class and it has the
NewUserAdmin password passed as a string, doesn't that expose it to
someone who just downloads the servlet class and does "javap -c" on
it?

I scanned through the java web services tutorial but didn't find (yet)
a discussion of something like this.

Thanks for any direction.