"code" is a class name, not a file name, so it shouldn't contain any slashes - only package names and the class name, separated by dots, like you would use whenever a class name is used.
"codebase" should be left out if the hierarchy of class directories is in the the same directory as the HTML page.
This section of the Java Tutorial talks about the applet tag in detail.