| JSP, security and MySQL [message #77447] |
Sat, 26 February 2005 15:05  |
Eclipse User |
|
|
|
Originally posted by: nospam.noemail.com
Hi,
I've created a simple JSP test which connect to MySQL DB v4.1.10.
From security aspects, I would like to not allow users of this page to
see what is :
- the connection string to DB (with username, password, DB name,...)
- the SQL statement
- connection and disconnection to/of DB.
For all these 3 things, i was thinking to use some servlets, like that
nobody can know what they are doing and how to they work.
if i don't use servlet, I;m forced to use stored procedures for point
2...but for the rest, i really don't know.
Does anyone could help me, giving me some good advices or links ?
thanks a lot,
Maileen
|
|
|
| Re: JSP, security and MySQL [message #77521 is a reply to message #77447] |
Sun, 27 February 2005 02:51  |
| Eclipse User |
|
|
|
Originally posted by: jmordax.terra.es
Maileen wrote:
> Hi,
>
> I've created a simple JSP test which connect to MySQL DB v4.1.10.
> From security aspects, I would like to not allow users of this page to
> see what is :
> - the connection string to DB (with username, password, DB name,...)
> - the SQL statement
> - connection and disconnection to/of DB.
>
> For all these 3 things, i was thinking to use some servlets, like that
> nobody can know what they are doing and how to they work.
>
> if i don't use servlet, I;m forced to use stored procedures for point
> 2...but for the rest, i really don't know.
>
> Does anyone could help me, giving me some good advices or links ?
> thanks a lot,
>
> Maileen
Hummm.... I think this is more a J2EE question than a WTP one.
Your JSP page will be executed at server side and all the java code will
be executed and dissapears from the code when it is returned to the
browser. I mean, your users will call the execution of the JSP file at
the server side, the JSP will connect to the DB, execute a SQL, and
return in HTML the results from the queries but the connectivity code,
sql statement, etc... will not be present in the result HTML code.
Try a simple example to double check what I am refering to.
Hope this helps,
Chemi.
|
|
|
Powered by
FUDForum. Page generated in 0.03271 seconds
Home