Re: Not showing your password in sql*plus

Petter Henrik Hansen (petter_at_fdmetd.uucp) wrote:
> Here are my two cents worth:
 

> When using sqlplus it is a simple way to hide your password from
> the ps command.
 

> sqlplus <<-EOF
> system/manager
> select * from dual;
> _at_test
> exit
> EOF
 
> The ps command will display only the sqlplus command and not what is to
> be executed in sqlplus.
> Try it.
> Seeing is believing

It looks to me as though your example is a shell script. Correct? Shell script have to be readable by the person executing the script. Therefore the person executing the script can just cat the script and read the password. Not good.

--
 _______________ ________________________ _____________
< Tommy Wareing X p0070621_at_brookes.ac.uk X 0865-483389 >
 =============== ======================== =============
/ If it's something I want, then it's something I need.\
| I wasn't built for comfort, I was built for speed!    |
\    -- Jim Steinman, Bad for Good                     /
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~