> We have a requirement here that we can't hard code any oracle database > instance name for security reasons. Is there any way we can pass the > connection string (for example, the oracle tnsname alias), or put the > instance name in a configuration file and somehow pass the information > from the configuration to the DBI code, so that the public won't see > the actual instance name in the code???? I know we can do that in many > other languages, but, can we do that using DBI for oracle???
How can you do that in other languages? If you have strings in the executable file, they can be discovered. You could read the data from a file (the file could even be encrypted) and pass it to connect(), or get it out of the environment. > use strict; > use DBI; > > my $dbh = DBI->connect( 'dbi:Oracle:orcl', > 'jeffrey', > 'jeffspassword', > ); > > > > Thanks a lot for any input. > > Linda > >
