| Connect with special application to DB. [message #120445] |
Thu, 19 May 2005 16:22 |
wejder
Messages: 7
Registered: May 2005
Location: Warsaw
|
Junior Member |
|
|
in my www application based on oracle 9i users connecting with db users accounts.
they connecting through WWW ( apache ).
but when someone will inquire SID of database ( user, pass just has )
will can connect with toad, odbc, ms access and any other apps and that is unacceptable.
i wrote some on logon trigger which recognize application, user and ip and i can lock that user on logon but when someone change access.exe to 123.exe he will in db.
what should i take note yet ? ( besides roles in db )
[Updated on: Thu, 19 May 2005 16:23] Report message to a moderator |
|
|
|
] 
Blog
Search
Help
Members
Register
Login
Home
