O'Reilly logo

Expert Oracle and Java Security: Programming Secure Oracle Database Applications with Java by David Coffin

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

Hide the APPVER Connection String

We are not going to solve the embedded password problem, and you might be wondering why. In a nutshell, this is a “chicken or egg” problem. Perhaps we could hide our passwords in Oracle database, but we would need an Oracle password to request them from the database.

You cannot talk to Oracle database without a user/password, so the question arises of where to store the password. We have solved that issue for all our application passwords except for the gatekeeper account, appver. So let's look at some of the prospective solutions for hiding that password.

Get It from a Second Source/Server

Well, if we don't want the password in our code, and we can't get it from Oracle database (without a password), perhaps ...

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required