HTML forms action attribute getting changed - Java Discussion Boards

Re: Encryption of Java-DB connection url?? [modified]

Alok Sharma ji4-Feb-11 1:38

4-Feb-11 1:38

yes actually the password/user name is there in my .class file for dbconnection thats what i want to hide.

Regards
Alok sharma

modified on Friday, February 4, 2011 7:48 AM

Re: Encryption of Java-DB connection url??

Richard MacCutchan4-Feb-11 2:48

Richard MacCutchan

4-Feb-11 2:48

This is still he wrong way to do it since anyone can then run your program and get access. As I said before you should obtain this information from the user and then add it to the string to connect to the database; so if the user does not know the password then access to your code will be of no use.

I must get a clever new signature for 2011.

Re: Encryption of Java-DB connection url??

jschell4-Feb-11 9:46

jschell

4-Feb-11 9:46

Alok sharma ji wrote:
any suggestions...

You start by actually defining the problem domain.

For example is this a server application or a client app?
Is the server app installed on a server that isn't secure?
If it is secure then what is your concern about access to the server app?

What happens if I get on the machine running this and reverse your class and then replace it with one of my own. So after you unencrypt it my class writes it out to the hard drive for me?

What database do you use? MS SQL Server has a user authentication mode - no password. Pretty sure Oracle does as well.

Re: Encryption of Java-DB connection url??

Alok Sharma ji4-Feb-11 21:12

Alok Sharma ji

4-Feb-11 21:12

what about small client apps with ms-access or mysql, also i have obfuscated my code but still an encryption will be good, although there is no guaranty of 100% security of code, i still wants to manage as much as i can.

Regards
Alok sharma

Re: Encryption of Java-DB connection url??

Richard MacCutchan4-Feb-11 23:34

Richard MacCutchan

4-Feb-11 23:34

How many times do I have to repeat this: "Don't put passwords in your programs."? If a function needs a password (or any secure information) then you should always ask the user for it. That is the only way to ensure the security and integrity of your system.

I must get a clever new signature for 2011.

Re: Encryption of Java-DB connection url??

jschell5-Feb-11 7:16

jschell

5-Feb-11 7:16

Alok sharma ji wrote:
what about small client apps with ms-access or mysql, also i have obfuscated my code but still an encryption will be good, although there is no guaranty of 100% security of code, i still wants to manage as much as i can.

That doesn't tell me anything.

For example say you want to write an app that plays mp3s and keeps user information about them. That would be a "small client app" and it it absolutely pointless to worry about security in that case.

Or perhaps you are writing a custom viewer for a database in a credit card processing center. In that case look into using a database protocol (connection) that doesn't require a user at all - the user credentials of the user using the app is used automatically.

Or you write a multiplayer game the communicates with a server - then you shouldn't have database code in the client app at all. Rather it should be in the server app only.

The other suggestion about the user typing a password can be useful too. However you must then consider what happens if the user forgets the password. Or, for a small business app, what if the the only employee with the password dies or is fired? The specifics of the business must dictate if you have a way to fix that problem or if you insist that the business is responsible for that themselves.

There are some simple tricks which might be suitable. One is to break the password into pieces (two strings) and separate from the connection string. Another is to do a simple encryption of the password. Put the encrypted value in the code and then decrypt for usage. It isn't secure from anyone that can code but it does prevent the casual explorer from finding it.

Finally note that the password provides access to the database. It doesn't protect the data in the database itself. To do that you must encrypt the data itself.

Re: Encryption of Java-DB connection url??

Alok Sharma ji13-Feb-11 19:20

Alok Sharma ji

13-Feb-11 19:20

thanks for the info, i was really worried about db and the data in it.

HTML forms action attribute getting changed

User 62554643-Feb-11 17:14

User 6255464

3-Feb-11 17:14

Hi, I am using struts framework and I have written the following markup on my jsp page.

<html:form action="/add_product" method="post" enctype="multipart/form-data">
    <div>
        <table style="width: 386px; height: 76px">
            <tr>
                <td style="width: 103px">
                    Model</td>
                <td style="width: 89px">
                    <html:text property="pModel" style="width: 175px" /></td>
            </tr>
            <tr>
                <td style="width: 103px; height: 24px">
                </td>
                <td style="width: 89px; height: 24px">
                    <html:file property="pImg3" style="width: 183px" /></td>
            </tr>
            <tr>
                <td style="width: 103px">
                    Description</td>
                <td style="width: 89px">
                    <html:text property="pDesc" style="width: 175px" /></td>
            </tr>
            <tr>
                <td colspan="2" style="height: 24px; text-align: center">
                    <html:submit style="width: 111px; height: 33px">Submit</html:submit>
                    </td>
            </tr>
        </table>
    </div>
</html:form>

However on execution the value of action="/add_product" is getting automatically changed to the context path of the project i.e. action="/WebApplication" Confused | :confused:

and when I click the submit button it redirects me to the home page of the project Confused | :confused:

.

I have already tested this code & it was working fine. But now suddenly this bug is appearing...
Can anyone please tell why the value in action attribute is changing and how to resolve it?
Thanks in advance Thumbs Up | :thumbsup:

modified 6-Jun-21 21:01pm.

Re: HTML forms action attribute getting changed

Richard MacCutchan3-Feb-11 22:26

Richard MacCutchan

3-Feb-11 22:26

I don't see any Java code here; is this really a Java question?

I must get a clever new signature for 2011.

Re: HTML forms action attribute getting changed

Alok Sharma ji4-Feb-11 1:05

Alok Sharma ji

4-Feb-11 1:05

try without / and cannot say much without true code snipptes........

Re: HTML forms action attribute getting changed

User 62554644-Feb-11 17:59

User 6255464

4-Feb-11 17:59

this is what i have...
and what is relevant to my query....
The only problem i am having is the action attribute, rest everything is fine....
If requires, please tell me what code snippets i should provide more...

modified 6-Jun-21 21:01pm.

can someone please explain this if expression?

TorstenH.1-Feb-11 0:06

TorstenH.

1-Feb-11 0:06

Hey!

I'm trying to refactor some code, bringing some style in.

I stumbled over an expression I can not explain at all:

if ((aParent == null) || ((parent = this.getParent(aParent.getLabel())) == null)) {
    // do not use variable parent
}
else{
    // use parent
}

can anyone explain this? I tried to cahnge it 3 times, but failed totally Frown | :(

regards
Torsten

I never finish anyth...

Re: can someone please explain this if expression?

Richard MacCutchan1-Feb-11 1:15

Richard MacCutchan

1-Feb-11 1:15

Does this do it?

parent = null;
if (aParent != null)
    parent = this.getParent(aParent.getLabel());
if (aParent == null || parent == null) {
    // do not use variable parent
}
else{
    // use parent
}

I must get a clever new signature for 2011.

Re: can someone please explain this if expression?

TorstenH.1-Feb-11 1:47

TorstenH.

1-Feb-11 1:47

right - this was also my first thought. However - this is not functional.
I also tried some other variations (invert it, bias variable parent, ...) - all failed.
the problem I'm facing here might be completely on another class - who knows Confused | :confused:

Strange little bit of codestyle warning - but not my biggest problem on the project.

regards
Torsten

I never finish anyth...

Message Closed

1-Feb-11 3:29

User 1138000

1-Feb-11 3:29

Message Closed

modified 21-Nov-20 21:01pm.

Re: can someone please explain this if expression?

TorstenH.1-Feb-11 3:58

TorstenH.

1-Feb-11 3:58

this doesn't make any difference. parent is null - no matter if it is set to null or not initialized at all.
Imho it's just a question of style and code reliability, more important on values like String or some number values.

Anyway, I have some more bugs in the code, need to add something like a "architecture" (I'm scared of that working package since I took over the project and brought the point up...) and - first topic on list - is to push out a deployment for the customer.

I'll let you all know how I massacred this little piece of code when I head back to that one.

regards
Torsten

I never finish anyth...

Re: can someone please explain this if expression?

Richard MacCutchan1-Feb-11 4:14

Richard MacCutchan

1-Feb-11 4:14

TorstenH. wrote:
this doesn't make any difference. parent is null - no matter if it is set to null or not initialized at all.

Not quite; there is a difference between an uninitialised object and one that is explicitly set to null.

I must get a clever new signature for 2011.

Re: can someone please explain this if expression?

TorstenH.1-Feb-11 5:29

TorstenH.

1-Feb-11 5:29

Oh come on - that was way back when hamsters wheels where needed to get the machine started!!

The JVM takes care of not initialized stuff. It sets every not initialized object to null, every boolean to false, ...

Object Initialization in Java[^]

regards
Torsten

I never finish anyth...

Re: can someone please explain this if expression?

Richard MacCutchan1-Feb-11 5:52

Richard MacCutchan

1-Feb-11 5:52

Really? My java compiler does not seem to have read that article:

C:\Users\Richard\Documents\eclipse>javac BaseTest.java
BaseTest.java:16: variable parent might not have been initialized
        if (aParent == null || parent == null) {
                               ^
1 error

I must get a clever new signature for 2011.

Re: can someone please explain this if expression?

TorstenH.1-Feb-11 23:54

TorstenH.

1-Feb-11 23:54

yeah - and then I realized how time flew by. I updated my runtime from V1.0 to V6 and got aware of the eclipse project...

regards
Torsten

I never finish anyth...

Re: can someone please explain this if expression?

jschell1-Feb-11 10:55

jschell

1-Feb-11 10:55

TorstenH. wrote:
The JVM takes care of not initialized stuff. It sets every not initialized object to null, every boolean to false, ...

No it doesn't.

It provides a default initialization for class member variables.

That is not the case for local variables. The compiler is responsible for flagging uninitialized locals as errors.

Re: can someone please explain this if expression?

Richard MacCutchan1-Feb-11 3:51

Richard MacCutchan

1-Feb-11 3:51

TorstenH. wrote:
However - this is not functional.

Strang,e it works fine for me; perhaps there is something else that you have not explained.

I must get a clever new signature for 2011.

Re: can someone please explain this if expression?

TorstenH.1-Feb-11 4:03

TorstenH.

1-Feb-11 4:03

there is something else that you have not explained.

perhaps something I didn't catch on Sigh | :sigh:

regards
Torsten

I never finish anyth...

how to solve?

pancakeleh31-Jan-11 19:32

pancakeleh

31-Jan-11 19:32

when a button was being clicked, this screenshot as shown below occurs. what does the screenshot below tells?

http://img822.imageshack.us/img822/7673/httperror.png[^]

Re: how to solve?

Richard MacCutchan31-Jan-11 22:09

Richard MacCutchan

31-Jan-11 22:09

The message is reasonably clear; the HTTP server encountered an error which is recorded in the server logs.

I must get a clever new signature for 2011.

Use Ctrl+Left/Right to switch messages, Ctrl+Up/Down to switch threads, Ctrl+Shift+Left/Right to switch pages.