I was wondering what the best route to take for making a login. The idea is to have the user login with their username and pass on frame 1. If the username and pass exist in the MySQL database then the user will be moved to frame 2. What would be the best way of achieving this? I know AMFPHP is old and I have heard to use ZENDAMF instead, but it seems that any recommendations are 2+ years old when I searched Google.
View 1 Replies
I have an AIR app in AS3 that connects to an online database, checks the login details for the user account, and logs in if all is good. Once logged in, the user can update database info, plus overwrite files in their user directory. So far it's working fine.
Problem is, I've only got it set up to send the raw login data. Once the php receieves it, it's hashed to check the hashed version in the database, but is there a way to hash and then unhash a password sent from an AIR app? Or a way to use https?
Also, regarding sessions, if you have a seesion in a browser, the session closes automatically when the browser closes, right? So how do you make a session close that you've opened via an Air app? I guess you could trigger a close from certain actions within the app, + when the app closes, but say the app crashes, or the computer crashes - will your session still be floating around out there open?
I have a html pages in which user is logged onin one page he can use swf movies but that movies need to know which user it isso I need to pass vars to swf (username), but that can be problembecause anyone could open swf with submitting username to swfso I need somehow secure user var pass to swf at startif
View 4 Repliesi recently had a look to the tutorial for custom authentication within a flex application. The login is managed by getting the ChannelSet from a RemoteObject:
private function creationCompleteHandler():void {
if (cs == null)
cs = ServerConfig.getChannelSet(remoteObject.destination);
[Code]....
After that the channlset can be used with the login command of ChannelSet. How can i insure that this is using a secure connection? I know that there is a amf channel and a secure amf channel. But how to tell to provide the credentials in a secure connection?
I'm trying to build a secure login area on a Flash-AS3 website. I've managed to create the login form and pass data to a PHP script which checks them.
1) I know that in PHP I can echo some infos that can be get from AS3. In this case I suppose to echo something like "success" or "failed" to give an answer to the login attempt. Is this way of communication secure? Can anybody sniff this content and force AS3 to behave like if login was successful?
2) Suppose that PHP-AS3 communication has been secured. What should I do now? May I simply show admin pages hidden before? Is it the correct way? Is it secure?
I am trying to write a secure login using flash. I worked out that the login must be separate from the protected content otherwise a decompiler will get round it very quickly. At the moment I have a login swf that posts variables to a server side script which then creates a session for a valid user.
The idea is to then forward on to the protected content. However I am unsure how to pass the users info to the swf so a user could not modify before the swf gets it and thus see another members content or what I can do to stop someone just accessing the content directly by just knowing the swf file's location.
I'm trying to build a secure login area on a Flash-AS3 website. I've managed to create the login form and pass data to a PHP script which checks them. Now I've got some questions.
1) I know that in PHP I can echo some infos that can be get from AS3. In this case I suppose to echo something like "success" or "failed" to give an answer to the login attempt. Is this way of communication secure? Can anybody sniff this content and force AS3 to behave like if login was successful?
2) Suppose that PHP-AS3 communication has been secured. What should I do now? May I simply show admin pages hidden before? Is it the correct way? Is it secure?
I would like to create a secure login section for a website. I have managed to build up an AS3-PHP communication where PHP checks user credentials. I am already providing data enchryption between AS3 and PHP but I would like to add some further security. Is it possible to implement a HTTPS login section?
View 5 RepliesI'm running into a problem with a login and password screen through Flash. It connects to MySQL database to check if the username and pass are correct. Well, when I test it and click submit it just sits there and says in the status bar of the browser, URL...I believe that the PHP and MySQL part of this project are working correctly and just want to see if anybody notices anything wrong with the AS code calling for the PHP that's in the swf:[code]
View 2 RepliesI've been working on a login for my AS3 website and I keep running into this issue where my novie gets stuck at "loading..." as you can see if you go to this websiteand try to create an account. I have a login.swf, a login.as, login.php, and newAccount.php all in the same directory folder. I've cleaned up some of the more obvious coding errors, but I'm a design guy thrown into a coding job... Errrr, not so fun. I'll post the contents of the files below , even though I'm pretty sure that's a no no...ogin.as
PHP Code:
package {
import fl.controls.Button;
[code]....
I want to have a login page in flash,which takes two inputs and passes it to the php. Then php checks the data base to see whether the username or password in valid or not and then replies back to the flash.
Is there any existing code for this
I've been messing around trying to figure out how to build a Flash login using PHP, MySQL, and AS2. Can't seem to get it working. What I want is, if the username and password match up with entries in the database, the user is taken to frame 2 of the movie. If the u/p doesn't match up, they're taken to frame 3 where a login failure message appears.
View 0 RepliesI have a highscore system in that I have small doubt like I want to store the user session in the mysql table and also the guest session. Like if the user is registered user then that session should be stored in the mysql db. Else if the user is not registered i.e guest user then also I need to store with the guest account for my high score system for a flash games site.
View 1 RepliesI'm having a little trouble with the 3. I'm trying to use a URLRequest to get login information from the mySql server. It works great when I try to log in, but if anyone else from outside my network tries to log in, it just hangs. I'm on port 8080 using localhost. I've even tried changing everything to my IP address instead of localhost and allowing my tester to try, but it still hangs.
View 6 RepliesI need to create a login page in my flash site that relates to information input to a mysql database. after the submit their information we want to send them a link to a differnt flash page with a login screen they will use their first name and a password (already in our database) to gain access to this "new" page. on that page there will be a welcome message that says "Welcome, User First Name" so I guess i have two questions
1: how do i set up a login page?
2: how do i pull that login info to a welcome page?
We are planning a desktop client application with Adobe AIR. The client app will be delivered to our customers with a database, which contains monthly updated marketing data provided by our company. As different customers will buy different sets of data from us, for example, a customer is only interested in marketing data in a specific product category, while another customer need all data in a certain region. After a customer installs this client app, new data will be emailed to the customer every month.
So, the requirement is to keep the data accessible only by the customer who bought it. After reading through AIR's secure local store and database encryption feature, I came up with the following design: each customer will have his own secret key (stored in AIR's secure local store), the secret key is used to encrypt the data that the customer has purchased. Of course, the monthly data that we sent to the customer will be encrypted using the same secret key. So my questions are: is AIR's database encryption and secure local store secure enough for this use case? If someone gets the encrypted database file, can he decrypt the DB?
I have a need to build a flash login page. No big deal, but I need to have six seperate login accounts. For example:
Username: user1 Password: pass = link to [URL]
Username: user2 Password: pass = link to [URL]
Username: user3 Password: pass = link to [URL]
and so on for up to six users.
Again the usernames and passwords would not change, but need to redirect the particular user to a certain page.
stop();
var user_input = "";
var pass_input = "";
login_button.onRelease = function(){
if(user_input == "user1"
&& pass_input == "pass"){
getURL([URL], "GET");
}else{
gotoAndStop (3);
}}
how could i make a login form for people to use to login to a certain area?? like for instance on this website [url]..... at the bottom he has a client login form....how could i do that?
View 4 RepliesI have a typical Flex-based application that was written to use a Java/Hibernate/MySQL backend. The client changed the requirements - now they want to distribute it on a CD where the user can just run the app without any installation or a network connection.
To do this, I certainly need to eliminate the web server and the database server and adapt my application (with as few changes as possible, of course) to a stand-alone application that will fit on a CD/DVD. I've managed to export the data to XML and read it into Flex, but I'm wondering if there's a way to recreate the Hibernate data structures in Flex so I could change as little code as possible. Failing that, is there any way to keep the existing Java/Hibernate external to the Flex code but retrievable without installing Apache Tomcat or MySQL?
I have a Flex application which manage a database composed by 7 tables.I have created the insert form and all work great. Now I wanto to improve the Form performances; the idea is to replace the TextInput of the Form with ComboBoxes which are provided by the DataBase tables
View 1 RepliesI have downloaded MySQL JDBC driver from [URL]... How do I configure it?
View 1 RepliesIn my table the Collation is:latin1_swedish_ci (but i tried UTF8_unicode too).In my flex application when it shows the table,it displays it correct,with all accent and pointing correct,but in the table is like :
View 1 RepliesI have to make connection to the DB and Insert a row based on the data that the SWF sent me...I will need to make it so that the SWF->PHP part is secure by not letting users tamper with data.I don't want to use SSL because its not a suitable solution... what other method is available?
View 4 RepliesI have an SWF that communicates with a PHP file and ultimately the DB. The PHP checks whether the User has the appropriate Password etc. and if it is accepted, the actions the person performed on the SWF (game) are used to compete with other Players of the game.
send altered data or actions that are illegal in the game with their submition? To clarify: If a character in the game can only move 1 square at a time, can an evil evil hacker/decompiler (who is a Player in the game) tell the SWF to tell the PHP file that his/her character moves 3 squares at a time?
I'm just want a sense that things will be somewhat secure. There isn't any sensitive information in the SWF besides the location of the PHP file on the net.
Geting non secure content message
View 5 RepliesWe have a swf file that we want to secure and make available only to authorized users.
I embedded the file in an aspx page and that works fine, since ASP.NET handles the aspx page, I can use ASP.NET authorization features and in the web.config restrict the access to roles="AllowedUsers" for example.
However smart users could still get to the file by accessing directly for example www.mysite/flash.swf. We want to make that kind of access secure.
I have a flex application, running with amfphp and connected to wamp, I want to use a secure connection using ssl, but my whole application is running from the same swf file, would using ssl in that case mean that all the data, being sent and received between the server and client ,encrypted? Because this is not what I'm trying to do, I only want to encrypt the sign up and sign in data.
please note that, I have log-in bar which is visible the whole time as long as the user is not signed in.in other words, I only want to secure some of the data being transferred not every thing.
I have installed Flash Media Server on our server. When I load up the application home page, I see the demo video of a train.
Then I click on the "Interactive" tab on the right hand side. I was SHOCKED to see that I can create a live stream from my local camera without any credentials at all. Anyone who visits this webpage can publish a live video stream on our Flash Media Server?
I have a SWF hosted on a https enabled domain and amfphp installation on the same domain. Now when i let user embed the swf on his on http page, i intend to send some data to amfphp without user seeing it. However i see that firefox with firebug plugin catches the post data easily. How is this happening ? Adobe documents say that if a swf is hosted in https and destination is also under https, its suppose to be secure?
View 4 Replieshow to make secure SWF files, so that decompilers like sothink won't be able to decompile these swf files at all. i have been assigned some research work to find out the stuff to make swf files highly secured
View 1 Replies
