Storing username and passwd in the code

Hi folks,
I am developing an applet based tool that allows users to access and modify database views. My concern is about storing the username and passwd in the code. The clients don't want to store the name and password in the code and want it flexible... Has anyone come across this problem and tackled it differently.
SP

I have tried using a logon and I have successfully made the connection. This applet is part of a web based application and the client finds it tedious to logon each time they come to the page with the applet. We use Oracle SSO for authentication for the rest of the application. They would prefer me to save the username/password in a file such that they can change it whenever they want ( without compiling any code). I am looking for a solution using a servlet or some other approach to be able to connect to the database.
thanks
sp

Similar Messages

Security issue: parameters username and password in the jbo:ApplicationModule

Hello,
in the <jbo:ApplicationModule> tag, you can give parameters for username and password, Then the .jsp connects to the DB via the username/password. Alternativly, You can provide this within the <Module>.properties file.
Now the question: Isn't this a security hole? I mean, is it under all circumstances impossible, that the source-code can be delivered by the web-server or that the byte-code from the servlet (compiled from .jsp) can be "restringed"?
Are there other ways to protect the credentials for accessing the ORACLE DB?
Michael

Hi John
thank You very much. You wrote
BC4J provides a number of mechanisms for specifying the DB username and password that do not require
the password to be stored in a JSP page. By default, in 9.0.2, the DB password is stored in
a BC4J configuration (persisted in a bc4j.xcfg file), which should be secured at the customer site. I've forgotten to mention our environment is SuSE7.2, DB 8.1.7.3, iAS 1.0.2.2, Portal 3.0.9.8.
For simplicity we would like to use the first method via bc4j.xcfg, But our bc4j.xcfg looks as follows
<quote>
<BC4JConfig>
<AppModuleConfigBag>
<AppModuleConfig name="OPKv1ModuleLocal">
<ApplicationName>de.condor.OPKv1.OPKv1Module</ApplicationName>
<DeployPlatform>LOCAL</DeployPlatform>
<JDBCName>WEBAPP_NETx</JDBCName>
<jbo.project>de.condor.OPKv1.opkv1PRJ</jbo.project>
</AppModuleConfig>
</AppModuleConfigBag>
</BC4JConfig>
</quote>
So the question is, where to leave schema/password?JDeveloper should have also generated a connection description in the same file named WEBAPP_NET. This
named connection should contain the relevant elements. It is not recommended that you edit this file directly. The
configuration editor and/or the connection editor should be used instead.
Hope this helps.
JR

How do I clear stored usernames and passwords for my podcasts?

We currently operate a password-protected RSS feed for the subscription portion of our website. For the most part it works flawlessly; people can subscribe to the feed and receive daily updates to their iTunes. If their account is canceled or goes on hold for non-payment then our database deactivates their username, which halts access to the feed.
That all works well. The problem is that if they re-subscribe to the subscription portion of our website they receive a new username and password. Then, when they go to re-subscribe to our password-protected podcast they are not prompted in iTunes for their new username or password. iTunes simply uses the old username/password combo from their canceled account, which makes the podcast fail to update.
So essentially, I'm asking how we can manually clear iTunes' stored usernames and passwords for podcasts. Thanks!

Figured it out. Just gotta delete keychain.plist, which is found in one of the following two spots:
C:\Users\YOURUSERNAME\AppData\Roaming\Apple Computer\Preferences\keychain.plist
C:\Documents and Settings\YOURUSERNAME\AppData\Apple Computer\Preferences\keychain.plist

URGENT - PLEASE READ MY MIND AND GIVE ME THE CODE

I AM DOING AN URGENT PROJECT AND I NEED SOME CODE. PLEASE PROVIDE THE CODE WITHOUT DELAY.
I AM SENDING DETAILS OUT ON MIND FREQUENCY 42 GigaHz at 10 GigaWatt.
STOP WHATEVER ELSE YOU ARE DOING AND SEND ME THE CODE NOW!

I am not happy with the service from Sun. Please me the solution NOW!Sun wishes to let you know that it feels truly sorry about your unpleasant experience and installs a new
24/7 competence call center immediately. Please hold the line while the building is being constructed.
ERRATA Sun apologizes for the actual inconvenience, but in the constant objective of satisfying the most, and due to the peculiar context of the stated problem,
the 24/7 competence call center will be replaced with a 42 Ghz English/Swahili mind-reading center. Please keep your mind opened until Sun finds the needed brains.

In some pages I keep receiving this message: "The proxy moz-proxy://172.20.5.250:8080 is requesting a username and password. The site says: "moz-proxy://172.20.5.250:8080"".

In my company, I used FF for sometime now.
I had some problem in the beginning, but using the proxy IP and Domain\Username + Password I was able to navigate.
Ever since I tried FF4.x and FF5.x... I started to receive the following message:
The proxy moz-proxy://172.20.5.250:8080 is requesting a username and password. The site says: "moz-proxy://172.20.5.250:8080"
Even after inserting the Domain\Username and the Password I keep receiving the same error. In FF3.xx I was able to use the proxy.
Don't know what to do any more there are several pages that have this problem.
http://pplware.sapo.pt/
http://www.facebook.com
http://www.netbooklive.com/
http://daxspeculator.blogspot.com/
Some... don't have any problem:
http://batracer.com
http://www.youtube.com
Even when I try to see the extensions I get this error. This is so weird!!!
For now... I have switched to Chrome, every new version of FF that is released I try it to see if the problem is gone. But, with no luck until now! :(

I did have this problem with proxy moz-proxy prompt for username and password. In my case it was for websites hosted not on the internet but on the local corporate intranet. I solved my problem by doing the following action:
Tools -> Options -> Advanced -> Network -> Settings: add the local website to the "No Proxy For:" field.
I hope this will help some of you out there that have manually configured their proxy settings. Also a tip if you need to turn on and off proxy settings I recommend using "Quick Proxy" add-on.

Why I need a code for rent a film and where ist the code? (I dont have a card)

Why I need a code for rent a film and where ist the code? (I dont have a card)

it's unclear what you mean
you say you dont have a card which I guess is you don't have a creditcard
in which case the other option is to pay by a giftcard which include a code which you put in
because to rent you have to pay otherwise it's not really renting

HT5557 Is there a way to purchase itunes books for someone else as a gift (Christmas) and give them the codes without automatically downloading the purchase for me? Or is an itunes giftcard the only way to go?

Is there a way to purchase itunes books for someone else as a gift (Christmas) and give them the codes or printout receiptwithout automatically downloading the purchase for me? Or is an itunes giftcard the only way to go?

TV shows will only appear in the cloud if you are in a country where they can be re-downloaded from the store (you can't add them yourself), in which case they will appear in the Purchased tab in the iTunes store app for re-downloading. But they will only appear there if you are in a country where they can be re-downloaded, and then only as long as the TV company leaves them in the store (content providers occasionally remove their items).

I bought an itunes card and it said the code was invalid

I bought an itunes card and it said the code was invalid

Try this link.
http://support.apple.com/kb/TS1292

I bought and iTunes gift card and accidentally scratched the code off how do i redeem the credit

I bought and itunes gift card and accidentally scratched the code off how do you redeem the credit on the card

iTunes Store: Invalid, inactive, or illegible codes

How to pass username and password with the portal url

i want to access portal from my web site. i have created username and password fields in my web page. when submited , my portal page should open. so how to pass username and password with the portal url.

This is not straightforward; but it is doable.
First tell us about your portal version; portal 10.1.4 has a slightly different method of doing it and the pre-10g portals were completely different animals.
And if you are in AS Rel 2, then the most important document for you would probably be the following:
[Creating Deployment Specific Pages| http://download-west.oracle.com/docs/cd/B14099_19/idmanage.1012/b14078/custom.htm#i1015535]
You might want to use it in conjunction with some metalink notes about your portal version and such a login page.
hope that helps!
AMN

TS1702 How do change the old Apple ID username and password to the updated username and password for the apps store?

How do you change the old Apple ID username and password to the updated username and password in order to get updated apps from the app store?

cbkitche wrote:
How do you change the old Apple ID username and password to the updated username and password in order to get updated apps from the app store?
Do you mean you kept the same account but you only updated your AppleID?
Just log out and log back in with new ID.
Note that the AppleID is embedded into the item at purchase and cannot be changed.
However, when you change your AppleID, it will link the old account name to the new account name so you will not have any problems updating apps using the new AppleID.

Forgot username and password from the email iCloud chozhe not know forgot. purchase the product, all documents have. What to do?

forgot username and password from the email iCloud chozhe not know forgot. purchase the product, all documents have. What to do?

If you don't know your ID, you can try to find it as explained here: http://support.apple.com/kb/HT5625. If you don’t know your password you can reset the password as explained here: http://support.apple.com/kb/PH2617.

This is how I am supposed to contact to have my annual creative cloud membership refunded? I cancelled immediately upon seeing the charge and followed the instructions given and wound up here. Am I supposed to share my username and password with the for

This is how I am supposed to contact to have my annual creative cloud membership refunded? I cancelled immediately upon seeing the charge and followed the instructions given and wound up here. Am I supposed to share my username and password with the forum? Adobe, I am about to go social with my frustrations!

No, this is a public forum, as in user-to-user, so you should not share any private information here. You will need to contact Adobe Support by chat or phone, which is apparently getting harder and harder to do. Use the link below and choose the Still Need Help? option at the bottom in the blue area - in the section that opens take your pick of chat or phone.
Contact Customer Care

I have a i tunes card, and have rubbed the code, but it smudged so i cannot read it , what do i do know, the store i bought it from said i need to contact apple, its not down to them. john

i have a i tunes card, and have rubbed the code but it smudged so icannot retrieve it, what do i do know. john

You need to contact iTunes support directly.
You can see contact info here: http://www.apple.com/support/itunes/

I scratched the label off on a £25 gift card and it removed the code. How can I get the code for the card?

I scratched the label off on a £25 gift card and it removed the code. How can I get the code for the card?

Click here and request assistance. Gift cards are usually if not always final sale because it would be easy enough for someone dishonest to abuse returns or replacements of them.
(58640)

Storing username and passwd in the code

Similar Messages

Maybe you are looking for