I'm trying to create some reports using jsp's/servlets pulling data
from an Oracle database. My problem lies in that I hard code
passwords into the connection string. I want to get away from this
but I'm not really sure how to do it. We have a password encrypted
site, which doesn't have anything to do with the Oracle password, and
I guess I would have to have the user put in their Oracle password
somewhere, but then how do I follow the user around with this
password and use that over and over again? I'm guessing cookies or
session id's. Does anyone have suggestions in implementing this or
good places to research this?