部署Java Hibernate Project的正确方法

Question

When I try to export a JavaSE + Hibernate project, the end result is I get a xyz.jar file, which can be extracted. In that extracted file, I get a bunch of .class files, which is okay but the problem is I or anyone can open up hibernate.config.xml and check the database connection settings, which might look something like this:

...
        <property name="connection.driver_class">com.mysql.jdbc.Driver</property>
        <property name="connection.url">jdbc:mysql://localhost:3306/mydb</property>
        <property name="connection.username">username</property>
        <property name="connection.password">password</property>
...

suppose if the db is hosted on some server instead of local host, then anyone can potentially access my data just by looking at hibernate config. Is there anyway to prevent this? Or am i doing it wrong. Is there anyway i can make deployment more secure? (I am not used to deployment part of software development lifecycle)

Answer 1

Well my way around it was using Java code for Hibernate configuration instead of xml. In this way, when someone extracts the .jar file of your project, they will see bytecodes of configuration, instead of readable codes of xml.