I have a Database Connection class which accesses the database credentials from a property file located at src/main/resources.

**DBconfig.properties**(property file)

DB.url=jdbc:mysql://localhost:3306/studentdb
DB.username=root
DB.password=root

我的连接类是这样的（位于src/main/java），
公共类dbconnect{

private static String resources="DBconfig.properties";
private static Connection con = null;
private static String url = null;
private static String username = null;
private static String password = null;

public static void main(String[] args) {

    ClassLoader loader = Thread.currentThread().getContextClassLoader();
    Properties prop = new Properties();

    try {

        InputStream rs = loader.getResourceAsStream(resources);
        prop.load(rs);

        url = prop.getProperty("DB.url");
        username = prop.getProperty("DB.username");
        password = prop.getProperty("DB.password");

        Class.forName("com.mysql.jdbc.Driver");
        con = DriverManager.getConnection(url,username,password);
        System.out.println("Database is Connected");

    } catch (Exception e) {

        System.out.println("Database is Not Connected");
        e.printStackTrace();
    }

}

}
我的问题是，我的凭据以明文形式存在于属性文件中，我是否正确保护了凭据？它是否像我已经实现的那样安全？这是一个使用weblogic应用服务器的springmvc应用程序。谢谢