• Post Reply Bookmark Topic Watch Topic
  • New Topic
programming forums Java Mobile Certification Databases Caching Books Engineering Micro Controllers OS Languages Paradigms IDEs Build Tools Frameworks Application Servers Open Source This Site Careers Other Pie Elite all forums
this forum made possible by our volunteer staff, including ...
Marshals:
  • Campbell Ritchie
  • Jeanne Boyarsky
  • Ron McLeod
  • Paul Clapham
  • Liutauras Vilda
Sheriffs:
  • paul wheaton
  • Rob Spoor
  • Devaka Cooray
Saloon Keepers:
  • Stephan van Hulst
  • Tim Holloway
  • Carey Brown
  • Frits Walraven
  • Tim Moores
Bartenders:
  • Mikalai Zaikin

global.jsa source viewable?!!?

 
Greenhorn
Posts: 1
  • Mark post as helpful
  • send pies
    Number of slices to send:
    Optional 'thank-you' note:
  • Quote
  • Report post to moderator
Howdy,
I'm using JRun 3.0 Service Pack 2a, Version 3.02a.11614 running on a Windows 2000 server.
I'm using a global.jsa file to initialize some classes, in particular, I'm creating a list of database connection strings. This is all working perfectly.
However, if I key in the URL to the global.jsa file directly, it sends the SOURCE of the code to the browser! This includes the database connection strings, usernames and passwords!
As you can imagine, this is not good. Is there a way to prohibit JRun from serving up requests for global.jsa files? Is there a trick around this?
Thanks for any help,
Scott
 
Do not threaten THIS beaver! Not even with this tiny ad:
a bit of art, as a gift, the permaculture playing cards
https://gardener-gift.com
reply
    Bookmark Topic Watch Topic
  • New Topic