Subject | Re: [IB-Java] Build on Windows |
---|---|
Author | David Jencks |
Post date | 2001-10-29T23:34:30Z |
On 2001.10.29 17:25:26 -0500 as wrote:
applet. You are relying 100% on database security to limit what the user
can do - they have the driver, user login, and password, so can write a
program to do anything they want (that the database allows). I'm not too
familiar with the Firebird security model, but I think they can create
tables and then fill up your hard disks, and probably create stored
procedures that will crash the server.
little time to work on it some more;-)
david jencks
>I would think 20 or 30 times before allowing database access from an
> --- David Jencks <davidjencks@...>
> wrote:
> > Are you seriously suggesting having a database
> > driver on a client machine
> > where you do not completely control the
> > installation/configuration of the
> > program using the driver???? Otherwise, 1 jar or 5,
> > what's the difference?
>
> It can make a difference in case of applet with
> access to a database. Your jdbc driver is very
> small and can be downloaded with an applet.
> That's nice. jdk1.4 will be released soon.
applet. You are relying 100% on database security to limit what the user
can do - they have the driver, user login, and password, so can write a
program to do anything they want (that the database allows). I'm not too
familiar with the Firebird security model, but I think they can create
tables and then fill up your hard disks, and probably create stored
procedures that will crash the server.
>I'm really glad people are starting to look at it. Now I just need a
> Thank you for your work.
little time to work on it some more;-)
david jencks
>(ok, I snipped, thanks sean)
> Alexander
>
>