[SOLVED] Hiding Passwords in the JSP

[Chewie71]

Hi,

If a user knows the right path to get to the JSP file for a Zimlet, can they view usernames and passwords that may be embedded in there?

If so....is there a way to put that sort of info somewhere else so that it cannot be found by some curious user?

Thanks,
Matt

[tdesorbaix]

They shouldn't be able to. The jsp is executed on the server side. So the user should only see the response the jsp send back when he call it.

[Chewie71]

OK...

Thanks for the response.

Matt