Re: Internet browsers and JDBC

The alternative is a multi-tier model (or what JavaSoft called type-3 JDBC driver). The bad thing about JDBC-ODBC bridge (type-1) is that it can only access your local database. Take a look at IDS Server: http://www.idssoftware.com/ You can install the IDS JDBC Driver (pure Java) in your local machine (PC, SPARC, HP, etc.) for your Java/JDBC application, and the database access is done by the IDS Server (the 3rd tier). Or you can install the JDBC driver on the IDS Server (can server as a Web server), and download the driver for your applet. This is feasible because Java API allows untrusted classes make connections back to its originator. --Michael Nils Myklebust <Nils.Myklebust@idg.no> wrote in article <32dfc5bc.39471216@gate.idg.no>... > chaminda@jcdcrs4.jobcorps.org wrote: > > : > :Hello! > : > :If any one has succesfully developed a JDBC application for use with > :Netscape, Explorer or Hot java, I would appreciate some helpful comments. > > I haven't, but the following is based on what I have read about these > things. > > :I managed to access an Informix database with JDBC from a standalone java > :program and a java applet run from through the appletviewer. They work > :just fine. > : > :But I found out that current versions of internet browsers will not allow > :certain java.* classes that access JDBC to be downloaded through the > :Internet. Therefore I was not able to run my applet using Netscape or > :Explorer. > > It shouldn't be possible to run such a program in a browser if it's > database access is via a local connection on your PC/Workstation > wether it uses the JDBC/ODBC bridge or direct JDBC. This would violate > the sandbox security of Java applets run from a browser. > Your problem shouldn't be related to the availability (downloading) of > classes, but simply that local database access shouldn't be allowed. > That would be no less of a security whole than allowing direct file > read/write on your PC/Workstation. > > The way to access the database from an applet run in a browser is to > use JDBC and connect to a server based driver (that must be on the > same server the Java code was downloaded from). > > In JDK1.1 there is a way to sign applet's and then releax the security > so applets run in a browser can do (most?) anything a standalone java > program or an applet run in the appletviewer can do. > > :There is a way around this. That is to rename the required java classes > :in order to mislead the browser. > > If this actually works it's a major security whole that should > immediately be reported to Sun so they can fix it. > > : I beleive there is a set of classes out > :there called Netscape_JdbcOdbc.dll. > : > :I dont know who wrote it or where I could get a copy. If anyone has any > :information, please help me out in getting a copy of this file > > Again if it exists, and makes it possible to access databases via ODBC > on your PC from applets run in a browser without signing and releaxed > security, Sun have a problem. > > > Nils.Myklebust@idg.no > NM Data AS, P.O.Box 9090 Gronland, N-0133 Oslo, Norway > My opinions are those of my company > The Informix FAQ is at http://www.iiug.org >