secure vars from php to flash

[Aquilonian]

Hi
I need to send a array from myPhpFile.php to myFl.swf, but it has to be in a certain way that nothing in the world can have acess to this array, only myFl.swf can receive it
Even if someones trys to acess directly this myPhpFile.php it will not output the array
Is that possible?

[Aquilonian]

Now that i just finish post i have another idea, and what if INSIDE the php file it haves some var
domainToSend = "www.mydomain.com/myFl.swf";
so that even if someones trys to acess this file directly it will not output the array but it will make the browser refresh and send the array do domainToSend
I am also afraid that someone can goes to cache and replace myFl.swf to another flash file with the same name that will output my array,thats why i want it to refresh before send
What do you think?

[Aquilonian]

Allrigth, OR php can check the hash of the flash file before send anything to it,so that if the guy wants to replace it in cache he will have to do it in the exact moment the php stops check the hash and start sending the array, and that will be impossible!
Thaks guys!
And now...how do i check the hash of a file using php?

[borrob]

I asked my brother once to check what he could see of my activities using flash and php. He called me back 5 minutes later. He had all the data.

The problem here is not so much php but flash. the variables that you send to flash are always visible so securing your php code has no use if somebody wants to have acces. The only possibility i see is dump flash.....

But if someone has another suchestion i'm willing to listen...

goodluck

[Aquilonian]

'the variables that you send to flash are always visible'
where?

[borrob]

'the variables that you send to flash are always visible'
where?
That's a very good question...
My brother is realy into low level computing but i think he used a spy like the one from microsoft ( client side ). But i'm not shure i will ask him and get back to you on that....

[Aquilonian]

Ok i will wait, thanks

[borrob]

He gave me this:

http://www.wireshark.org/download.html

with this program you can see wich packages are being send between the client and the server. most of it is technical nonsense but try it with your php and see what you can make of it...


run the program and start one of the capture interfaces ( normally this would be your ethernet card ) , you do this by pushing the first menu button in wireshark
then go to your site. do your thing and go back to wireshark. try clicking in the top of the three windows and looking at the info in the lower one.

Would like to here what you've found!

[Aquilonian]

Your brother killed all my plans for world domination

[borrob]

I'm very sorry about that huh ( rather not live under your rule i think ) hehehehehe