PDA

View Full Version : how to protect data sending from flash to php?



shogo
June 1st, 2006, 11:15 AM
For example, if i need to send some variables from flash via POST metod to php script.
Everyone can decompile swf file and find code line with POST metod. Then you just need to make other swf file and send wrong data.

How can i post data to db from flash securely?

bwh2
June 1st, 2006, 12:54 PM
the answer kind of depends on the need. what type of data are you trying to secure if you don't mind me asking?

shogo
June 1st, 2006, 02:03 PM
ok for example i have a game. The game has TOP100 table in mysql.
When the game ends the results of game are send to data base.

bwh2
June 1st, 2006, 02:21 PM
my understanding is that flash won't allow you to send variables across domains unless you use this method: http://www.sephiroth.it/phpBB/showthread.php?p=24153

on a side note, you should also make sure to qualify your data to avoid sql injection (http://www.unixwiz.net/techtips/sql-injection.html), remove delete and drop priviledges, and include your db connection/query info above the public_html directory (http://kirupa.com/forum/showthread.php?t=214347).

Seb Hughes
June 1st, 2006, 02:50 PM
Make sure they enter an image verifry or somthing.