Hibernate version: 2.1.6

Name and version of the database you are using: MySQL

I have written a swing application that uses hibernate to connect to a MySQL database. The application is used to interface with a database that powers a web application and automatically prints things. The application is loaded via Java WebStart.

My question is about the hibernate mapping file. Right now when I create the JAR file for the program I am including the hibernate.cfg.xml in the JAR. This file has the username and password build in to it. Since the JAR is nothing more than a zip file anyone with a little Java knowledge could open the jar and obtain a username and password.

Is there a way to replace hibernate.cfg.xml with a compiled class? Is there another more appropriate way to handle this?

For what its worth, you can obfuscate this by setting up your Configuration object and SessionFactory programatically. This is documented.

Or use startup properties.