smtp authentication and username/password vulnerability in jsp

Hello,

I'm using a jsp to connect to an smtp server which requires authentication.

So I am setting the username and password for the smtp server right in that jsp page.However, what if someone downloads the jsp page? They'll see my password right there in plain text. I could write a servlet and store compiled code only on the web server. But what if someone downloads the .class file and decompiles it? Will they see my username and password then?

How can I provide username and password for smtp authentication inside the jsp page or servlet, and at the same time guarantee that this username and password will not be discovered by the users?

Thanks!

Elana

[700 byte] By [sselena911a] at [2007-10-3 2:56:45]