Databases
StackOverflow2013
Postsdbo
PO
 

Note that there are some explanatory texts on larger screens.

plurals
  1. PO
    primarykey
    data
    text
    <p>Yes, JARs are just ZIP files, so it's entirely possible to open one using WinZip and look at the contents. If you know what you're doing, you can find a plain text password inside.</p> <p>It sounds like your JAR contains a client that connects directly to a database. You don't say whether this is done over the Internet or a VPN or a LAN. Is the database deployed remotely from the client?</p> <p>This is one reason why client/server apps went away: it's hard to secure them over the Internet. </p> <p>Your app sounds like classic client-server to me. Do I have that right?</p> <p>A middle tier is usually introduced between the client and the database to check security, validate and bind inputs, and shuttle requests to the appropriate handler for fulfillment. Have users present credentials that your middle tier has to validate before passing them along to the database.</p> <p>It can also give you a fighting chance against SQL injection attacks.</p> <p>If you encrypt the JAR contents you'll have to write a custom class loader to decrypt them when loading. Not for the faint of heart.</p> <p>If your client is a Swing app, with all the logic and database stuff built into the listeners and event handlers registered for each component, you'll have a serious rewrite on your hands. You'll be moving to more of a service oriented architecture, where all the work is done by services on the server side. The client only does what it's supposed to in classic MVC: pass events along to the server side and display results. Your client will be a lot lighter.</p> <p>That's going to be the biggest shock to your development team and the business.</p>
    singulars
    1. This table or related slice is empty.
    1. POHow are secure database connections usually implemented in JAR files?
      singulars
      1. PTQuestion
    1. PTAnswer
    1. USduffymo
    1. USduffymo
    plurals
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. POHow are secure database connections usually implemented in JAR files?
      singulars
      1. PTQuestion
    1. This table or related slice is empty.
    1. VO
      singulars
      1. PO
      1. This table or related slice is empty.
      1. VTUpMod
    2. VO
      singulars
      1. PO
      1. This table or related slice is empty.
      1. VTAcceptedByOriginator
    3. VO
      singulars
      1. PO
      1. This table or related slice is empty.
      1. VTUpMod
    1. COThe jar will be embedded on an HTML page and will make requests back to the MySQL database that the rest of the website uses. Honestly not sure why they went with Java on this. My guess is that some engineer knew it and didn't want to be bothered with learning PHP. Please see my update in the original message for more info.
      singulars
      1. PO
      1. USChris Bloom
    2. COHow would PHP be any better? I don't see that the update makes me feel much better. Do you charge for this product? Do you really have a MySQL database exposed to the entire Internet? Good luck with that. You have no idea who's hacking into that database. It's possible to do this with Java, but it sounds like your design is flawed from the get-go.
      singulars
      1. PO
      1. USduffymo
    3. CONo, the database is currently behind a firewall with a few IP exceptions. But now that you mention it, we would have to open it up entirely for this to work. Regarding PHP, it would be better because all of the database connections would happen behind the scene directly at the server, and only the end data would be transmitted (aka just like every other PHP/MySQL application on the internet)
      singulars
      1. PO
      1. USChris Bloom
 

Querying!

 
Guidance
A row detail

Detail views are divided into sections. All the information in the data section comes from columns in the selected row. The other sections display data from other, related rows.

Related data can be related in a to-one or a to-many fashion. Captions of data related in a to-many fashion link to a list view showing a filtered view of the table.

Try moving around until you find a non-empty to-many entry and click on the label to get to one. You can move back to the root by clicking on the database name in the header.

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload