Java Security Database connection

Question

Hi I have client java program that execute with jar file.

However that client program contain JDBC with user name and password.

I think it's not really good for security because everyone can decompile jar file.

Which one is best way to make JDBC connection string with secured module.

Program is built by Java version 1.6. Database is Sql-server.

Thank you!

Community · Accepted Answer · 2017-05-23 11:50:56Z

1

It is common practice to have user/password info contained within the source. If you are worried about people decompiling the code, you need to obfuscate the jar file.

Pro Guard is a good tool for this.

Here is another article from Stack Overflow that covers some of the best tools in detail: Best tool for jar or class obfuscation without need of writing any additional config file

edited May 23, 2017 at 11:50

CommunityBot

11 silver badge

answered Dec 11, 2014 at 14:52

colbyJax

1,0631 gold badge9 silver badges9 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

Alexander Ivanov · Accepted Answer · 2014-12-11 14:53:14Z

0

First what came to mind is usage of input dialog

String userName = JOptionPane.showInputDialog("Enter DB username");
String password = JOptionPane.showInputDialog("Enter DB password");
String connectionURL = "jdbc:sqlserver://localhost;user=" + userName + ";password=" + password + ";";

answered Dec 11, 2014 at 14:53

Alexander Ivanov

2,1331 gold badge12 silver badges15 bronze badges

Collectives™ on Stack Overflow

Java Security Database connection

2 Answers 2

Comments

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related