Title: RE: URLConnection and Password and Username

You know.. I went ahead and followed this.. and there is a major typo on the first tutorial on the second page when creating the mysql database for tomcatusers.  Look for it if you do it this way:

5. Create the user_roles table using the following command:

create table users
(
    user_name varchar(15) not null,
    role_name varchar(15) not null,
    primary key(user_name, role_name)
);


SHOULD SAY:

5. Create the user_roles table using the following command:

create table user_roles
(
    user_name varchar(15) not null,
    role_name varchar(15) not null,
    primary key(user_name, role_name)
);


-----------------------------------------------------------------
J a m e s   B.   S w a r t
Agere Systems - Colorado Design Centers
Unix/Windows Systems Administrator, WAN, LAN,
Desktop, Voice, Printers, Security Focal Point,
& Local CIO Service Delivery Manager Contact
VOICE: 720-494-2330 � FAX: 720-494-2331


-----Original Message-----
From: Ronald Wildenberg [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, December 11, 2001 3:36 AM
To: [EMAIL PROTECTED]
Subject: Re: URLConnection and Password and Username


Hi Peter,

You are taking the wrong approach here I think. You should not
code these kind of security issues directly into your JSP or servlets,
but instead use the Tomcat security features. If you use Tomcat,
of course :-)

There are some very good article on O'Reilly about protecting parts of
your web site with username/password combinations:
http://www.onjava.com/pub/a/onjava/2001/07/24/tomcat.html
http://www.onjava.com/pub/a/onjava/2001/08/06/webform.html

Good luck,
Ronald Wildenberg.

===========================================================================
To unsubscribe: mailto [EMAIL PROTECTED] with body: "signoff JSP-INTEREST".
For digest: mailto [EMAIL PROTECTED] with body: "set JSP-INTEREST DIGEST".
Some relevant FAQs on JSP/Servlets can be found at:

 http://archives.java.sun.com/jsp-interest.html
 http://java.sun.com/products/jsp/faq.html
 http://www.esperanto.org.nz/jsp/jspfaq.jsp
 http://www.jguru.com/faq/index.jsp
 http://www.jspinsider.com

Reply via email to