Discussions
Categories
- 197K All Categories
- 2.5K Data
- 546 Big Data Appliance
- 1.9K Data Science
- 450.8K Databases
- 221.9K General Database Discussions
- 3.8K Java and JavaScript in the Database
- 31 Multilingual Engine
- 552 MySQL Community Space
- 479 NoSQL Database
- 7.9K Oracle Database Express Edition (XE)
- 3.1K ORDS, SODA & JSON in the Database
- 556 SQLcl
- 4K SQL Developer Data Modeler
- 187.2K SQL & PL/SQL
- 21.4K SQL Developer
- 296.4K Development
- 17 Developer Projects
- 139 Programming Languages
- 293.1K Development Tools
- 111 DevOps
- 3.1K QA/Testing
- 646.1K Java
- 28 Java Learning Subscription
- 37K Database Connectivity
- 161 Java Community Process
- 105 Java 25
- 22.1K Java APIs
- 138.2K Java Development Tools
- 165.3K Java EE (Java Enterprise Edition)
- 19 Java Essentials
- 162 Java 8 Questions
- 86K Java Programming
- 81 Java Puzzle Ball
- 65.1K New To Java
- 1.7K Training / Learning / Certification
- 13.8K Java HotSpot Virtual Machine
- 94.3K Java SE
- 13.8K Java Security
- 205 Java User Groups
- 24 JavaScript - Nashorn
- Programs
- 475 LiveLabs
- 39 Workshops
- 10.2K Software
- 6.7K Berkeley DB Family
- 3.5K JHeadstart
- 5.7K Other Languages
- 2.3K Chinese
- 175 Deutsche Oracle Community
- 1.1K Español
- 1.9K Japanese
- 233 Portuguese
Hiding my jars of applet

Narayan
Member Posts: 310
Hello Can anybody tell me how can I hide my jar,lib jars or How could I load my applet without giving fully qualified jar destination.Whenever I make applet every user could easily access and download my jar but as I saw of big vendors like Opera, they usually hides their applet's jar files Could any body tell me how can it be done! Alternative ways will be appreciated
Thanks.
Narayan
Thanks.
Narayan
Answers
-
If a JRE can get your Jars, so can an end user.
If you don't want people to have your Jars, don't upload them to the net...I saw of big vendors like Opera, they usually hides their applet's jar files..Really? Give us an URL for a web page with an applet that has these supposedly 'hidden' Jars. -
Andrew Thompson wrote:Hello Andrew,
If a JRE can get your Jars, so can an end user.
If you don't want people to have your Jars, don't upload them to the net...I saw of big vendors like Opera, they usually hides their applet's jar files..Really? Give us an URL for a web page with an applet that has these supposedly 'hidden' Jars.
Oh ya i've got it's jar files . The url was http://www.opera.com/mobile/demo/ actually the jar files are located on other side and called via javascript.But still i feel dange because I've listened that java decompiler can easily open our jar files and codes too is that true??
Thanks. -
Narayan wrote:You can decompile the class files in the jars yes.
But still i feel dange because I've listened that java decompiler can easily open our jar files and codes too is that true??
Do you think it's a real danger that someone will do that to your applets? Is there confidential data inside those applets? Do you think your applets are so amazing that someone will want to steal your code for them? -
Ya I know but actually the problem was I could connect to my server database with my db user and pass all on hard coded Java. and whenever I see the jar by decompiling ,it gives me the right user and pass of my database. Can I get rid of this issue?
Thanks -
Narayan wrote:That's why applets never connect directly to a database. If an applet needs to use a database, the standard way is to have an applet send requests to a servlet, which handles the actual data fetching. This way the server exposes a small public API, which
Ya I know but actually the problem was I could connect to my server database with my db user and pass all on hard coded Java. and whenever I see the jar by decompiling ,it gives me the right user and pass of my database. Can I get rid of this issue?
should be designed so it doesn't provide too obvious security issues (like allowing the client to delete a user just based on the user ID). -
Ok now I've known so good stuffs. Thanks for reply. And do I need to do same thing on Java Desktop Application too.?? I mean software-> database connection only via Servlet(server programming) !
-
Narayan wrote:If the server is on a different computer and accessible to public, then yes, you might need to.
Ok now I've known so good stuffs. Thanks for reply. And do I need to do same thing on Java Desktop Application too.?? I mean software-> database connection only via Servlet(server programming) !
This discussion has been closed.