StackOverflow2013

Note that there are some explanatory texts on larger screens.

plurals

POJava web application DAO writing authenticated UserID and IP Address to DB
text
Body
copied!<p>I'd like to write to my Oracle DB the user ID and IP address of the logged in user (web app) whenever I perform SQL UPDATEs and INSERTs. Such as</p> <pre><code>public static int updateUser(STKUser user, STKUser loggedIn) throws DAOException { Connection connection = null; connection = DB.getConnFromCache(); PreparedStatement ps = null; String query = "INSERT INTO xtblPersonnel (pID, pPssWrd, pAdminDate, pAdminIP, pAdminBy) VALUES (?,?,SYSDATE,?,?)"; try { ps = connection.prepareStatement(query); ps.setString(1, user.getBadge()); ps.setString(2, user.getPassword()); ps.setString(3, loggedIn.getIpAddress()); ps.setString(4, loggedIn.getBadge()); return ps.executeUpdate(); } catch (Exception e) { System.out.println("SQL Exception inserting new user with badge: " + user.getBadge() + ". Error Message: " + e.getMessage()); LOGGER.log(Level.INFO, "SQL Exception inserting new user with badge: " + user.getBadge() + ". Error Message: " + e.getMessage(), user); throw new DAOException("SQL Exception inserting new user!"); // return 0; } finally { DB.closePreparedStatement(ps); DB.releaseConnToCache(connection); } </code></pre> <p>}</p> <p>STKuser is a Javabean</p> <p>My application uses a general Oracle db username and password so that is the reason why I want to record who did the update or insert and from which machine.</p> <p>Is this an acceptable approach. I used to pass in the session but have realized this is a no no.</p>

Querying!

Guidance

An individual column

Larger individual text columns get their own page to allow for proper reading.

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload