Security - What if a hacker reach to log on our middle-tier machine? [message #61335] |
Thu, 15 April 2004 05:50 |
Patrick Tahiri
Messages: 119 Registered: January 2004
|
Senior Member |
|
|
Hi,
I would like to know how to protect my databases if a hacker could log on or come through on our web server environment?
I have a web server which is working as a middle-tier between our customers (via Internet) and our databases!
If a hacker can log on my web servers, he can use the info on the ODBC or JDBC to connect to my Oracle Databases and drop tables or corrupt my databases!! :(
How could I avoid someone who came through illegaly on my web server to connect further to my database servers?? Do you know different technics to reach this level of security?
Thank you for your help!
Regards,
Patrick Tahiri.
|
|
|
|
Re: Security - What if a hacker reach to log on our middle-tier machine? [message #61354 is a reply to message #61341] |
Fri, 16 April 2004 01:21 |
Patrick Tahiri
Messages: 119 Registered: January 2004
|
Senior Member |
|
|
Thank you Thiru!!
Something else:
We have a web application server that use a connection string with the username and the password: is there a way to "hide" or encrypt the password so that only the compiled application can read the password??
What if I have a shell script containing a connection string? Is there a technique to hide and encrypt the connection string or part of it (for exemple only the password and the username..)?
Many thanks for your help!
Regards,
Patrick Tahiri.
|
|
|
|