Printable View
Hi all,
I'm developing an application which read some data from a db.
The connection to the db is performed through standard login/password mechanism.
The problem is: how to store the db password?
If I store it as a class member, it can be easily retrieved through a decompiling operation.
I think that obfuscation doesn't solve the problem, since a string password can be found easily also in obfuscated code .
Anyone has suggestions?
Create a multi-tier application, where an inner tier residing on a server performs all database IO and your application connects to the server application - not directly to the database. Client communicates to the server through some type of communication (eg Object serialization, xml, text, etc...not direct SQL commands) and the server performs the SQL operations.
For example:
Client <--> [Inner Tier (server application) <--> Database]
Where [] is one or more servers.
Hi,
You can use SHA to encrypt the password too.
Core java
How does this solve the original posters problem?Quote:
Originally Posted by mr.miku