Re: Internet browsers and JDBC
Posted in 1997
chaminda@jcdcrs4.jobcorps.org wrote: : :Hello! : :If any one has succesfully developed a JDBC application for use with :Netscape, Explorer or Hot java, I would appreciate some helpful comments. I haven't, but the following is based on what I have read about these things. :I managed to access an Informix database with JDBC from a standalone java :program and a java applet run from through the appletviewer. They work :just fine. : :But I found out that current versions of internet browsers will not allow :certain java.* classes that access JDBC to be downloaded through the :Internet. Therefore I was not able to run my applet using Netscape or :Explorer. It shouldn't be possible to run such a program in a browser if it's database access is via a local connection on your PC/Workstation wether it uses the JDBC/ODBC bridge or direct JDBC. This would violate the sandbox security of Java applets run from a browser. Your problem shouldn't be related to the availability (downloading) of classes, but simply that local database access shouldn't be allowed. That would be no less of a security whole than allowing direct file read/write on your PC/Workstation. The way to access the database from an applet run in a browser is to use JDBC and connect to a server based driver (that must be on the same server the Java code was downloaded from). In JDK1.1 there is a way to sign applet's and then releax the security so applets run in a browser can do (most?) anything a standalone java program or an applet run in the appletviewer can do. :There is a way around this. That is to rename the required java classes :in order to mislead the browser. If this actually works it's a major security whole that should immediately be reported to Sun so they can fix it. : I beleive there is a set of classes out :there called Netscape_JdbcOdbc.dll. : :I dont know who wrote it or where I could get a copy. If anyone has any :information, please help me out in getting a copy of this file Again if it exists, and makes it possible to access databases via ODBC on your PC from applets run in a browser without signing and releaxed security, Sun have a problem. Nils.Myklebust@idg.no NM Data AS, P.O.Box 9090 Gronland, N-0133 Oslo, Norway My opinions are those of my company The Informix FAQ is at http://www.iiug.org