I am using AS3 for a flash project I am working on. What I would like to do is secure the SWF so it will only run on a particular domain. If it possible to do this? to make sure it only runs when it is served from [URL]?
View 3 RepliesI have a question how can I secure my flash website (*swf) for being Downloaded??
View 2 RepliesI have a FMS 3 in on a linux server and I have a ViewCast Niagara Pro II encoder. I can publish to the FMS 3 no problem but how to I limit who can publish to the server, because currently I can use the free Adobe Media Encoder to connect to the server and publish with no authorization which tells me anybody could do the same if they just input the rtmp url and feed name.
View 29 Repliesmy team is building a game in flash to be embeded in a asp.net application.When the game is over the player have the chance to type his name to save his score.This is done using web services called from flash. The webservice receives the name and score.Since the webservice is publicly available how can I make it only callable from my flash given the following conditions:The .swf is hosted by the same asp.net application There are two domains that can access the same application (I have run previously into cross domain issues).Using SSL is not an option. The webservice has to be consumed by the .swf file.
View 1 RepliesI'm building a server-side API and client-side library for a JavaScript-based game where two very important features must be secured. A user must be debited for each play We must ensure that the score that gets submitted is the actual earned score by the player. Solving the first problem seems simple; at the beginning of each play we hit the API, debit the user's account and return a unique Play ID. When we submit the user's score for that play, we pass the ID issued at the beginning.
The second one has me a little stumped. Initially I considered a client-side hashing algorithm based on the ID and the score, but quickly realized that the Javascript that produces the hash could easily be reverse-engineered, even if it was obfuscated. At this point I considered a small flash component that generates the hash, but I've heard that even compiled flash can be decompiled.
[Code]...
I finished a Flex app using FB4.5 and uploaded and tested it fine to a shared host. I'm now in the process of securing the app using https, but have landed in a quagmire.I forced the load of all pages to https with .htaccess so that the Flex app loads with SSL. Problem is that I get a connection failed ('BadVersion') when the app makes a data service call using the gateway.php file because of the .htaccess force (it is looking for http rather than https). I believe I can hardcode the https path in the Flash Builder class file, but I don't want prevent the app from working on my dev machine either.Also, even if the gateway.php file is called using SSL, will the following calls to the PHP files containing the actual SQL queries fail because of the forced SSL by the .htaccess directives.
Instead of using .htaccess, I have also successfully used PHP to secure the initial launch of the app with a https redirect statement in the beginning. This allows the app to work, calling the gateway.php file fine because it isn't forcing https on everything. BUT, this defeats the purpose of trying to get everything to be encrypted.Is is it necessary to have the gateway.php file launched on SSL because of transmitting in binary AMF?
post the code for a working cross-domain securityfile that allows access only from the same domain as all the flashfiles and xml files are in?used to be easy in as2 but i think i dont know what i need to know about it in as3..
View 3 RepliesWe are running FMS3 on Windows 2003 Server. Videos stream and play fine when inside our domain, but outside the domain the videos take anywhere from 20 or more seconds before playing.
After analizing the connections it was determined that the player is randomly trying to access ports until it gets to the one that works, but this is ONLY happening from people trying to view videos from outside our domain.
What would be the best way to secure .net web services used by a flex application (both desktop and browser) that requires login? I thought about requesting the user and password in every method of the web service, and having them stored as variables in the flex app, but I don't feel like this is the most elegant way.
View 2 RepliesI have moved a web application from old domain to new domain. I cannot get Flash to engage. I have changed the domain in flash_images.php file to the new domain. I have a flash_box.swf file and I have a js file these are the only flash components that I see--old domain is e.g. www.example.com new domain is [URL]..I am not a flash developer, how do I get flash to work on the new domain?
View 3 RepliesI created some game and would like to let the users play it only on my domain, so to forbid to play it offline or put on some other site. Is there a way to do it? Somehow check domain or so?
View 1 RepliesI am having an application where I stream videos through RTMP using FMS and the sample vod application. I am securing RTMP streams using domain/swf security on server side. I need to stream videos to iOS devices and secure the videos. How can I do that?
View 1 RepliesMy swf works fine when previewed locally but because of flash cross domain issues (link below) doesnt work live. [URL] Ive used a 'crossbrowser.php file to .load in xml but am not having success with the sendAndLoad command. [URL]
View 3 RepliesI have a .swf in a index.html, in a domain: [URL]My question is simple: Using Actionscript 3.. how I know the name of the domain where my .swf file is hosted?
View 1 RepliesI know how to get the URL of the page, but how can I extract simply the domain and the domain alone? It must return the same value with or without www, and it must also return the same value regardless of file, with or without trailing slash, etc.
So[url].... would return [url]...., and [url]......... would return the same as well.Is this possible?If so, is there a way to do it without calling ExternalInterface.call('window.location.href.toString')?
[url]...
According to the documentation outlining the facebook sharer.php, in order to post flash inline I need to add my domain to the facebook whitelist. However, I can find no information detailing the procedure to accomplish this.
Is it possible for a swf to get info from an XML file that is placed in a different domain? And if it is, how can I do it?
View 3 Repliesi've done just about everything i can think of to load an external .swf located on a different domain.i have the crossdomain.xml file that reads like this:[code]my .swf is working when i test it offline, but when i upload it to another server, it completely fails at loading any external swfs.
View 5 RepliesThis is the code I want to use to direct a user to a different web page-
function linkToBiblioteca(event:MouseEvent) {
var request = new URLRequest('www.biblioteca.buap.mx');
navigateToURL(request,"_blank");
}
- but it trys to open inside of my directory. How can I avoid this?
Maybe this a recurrent issue in almost every Flash forums,but theres something that continues to miss me. I'm confortablewith AS2 and programmed some access for xml feeds with it, but theAS3 is giving me a fight for it.I want to be able to read a RSS feed from a newspaperwebsite. Everything is going well if the movie is running insideFlash, but outside it's not (I know that this has to do with thesecuruty level, that is minimal at runtime).I've seen all kind of solutions, but none of them doesn'twork so far. Has a "not very familiar" with AS3 person,, with a example of crossdamin.xml and the"Security.allowDomain" command so that I can get that RSS with noproblems.1) do you think it's a good ideia to have a TimerEvent totrigger the reloading of such RSS?2)In what circumstances does the <img> works in a
View 2 RepliesI am building a flash AS3 movie for a client that uses a facebook-connect authentication then loads some dynamic xml and plays.At the last minute the client has informed me that they actually need the flash movie and assets to reside on an external server, so the flash and the xml are not going to live on the same domain.I have the added problem that the xml comes from a PHP file with a session that has been authenticated, so I don't really have the option to use a proxy PHP include to make this work (I believe the session would be broken)
View 2 RepliesIs it possible for SWF to call a php file from another domain, even without a cross domain policy on the other domain computer?
View 1 RepliesIs there some way to secure nearly expired domain name.
View 1 RepliesI have a flash that loads from an rss feed (xml). It works great if i putt (www + my domain dot com) in the url, but wont load the data if I just use mydomain dot com (without the www). I have heard of crossdomain.xml.
[Code]...
I have a swf movie player located in [URL]. Normally this a.swf is used by a html page, the swf file is embedded in a [URL]. The website is not built by me but I know there is a restriction that only the html in [URL] can play the video . Now what I want to do is embed the a.swf into a c# project using swfloader, I will set the source property of swfloader to [URL]. My question is will the c# project be able to play to video file the same as in the html page?
View 1 RepliesI am trying to load an xml file from wikipedia into my flash movie.
loader = new URLLoader();
loader.addEventListener(Event.COMPLETE, tweetLoaded);
loader.load(new URLRequest("http://en.wikipedia.org/w/api.php?action=query&rvprop=content&format=xml&pageids="+subNum));
loader.addEventListener(IOErrorEvent.IO_ERROR, onIOErrorFunction);
This works fine when the flash file is run locally but when I upload to my domain it does not seem to work. I have read elsewhere that the cross domain rule does not apply to XML files only to images and other media. Is this true? If not is there a work around so that I can load in XML files from domains other than the one the swf is hosted on?
Okay I am really confused, my program queries both Bing API and the media wiki API. The Bing api call works fine, I can retrieve the XML search results back from it fine. But the wikipedia call does not work (online). I have tried listening for the Security_Error on the wikipedia call but it does not fire.
I'm successfully loading swf from another domain, but when i addChild loaded content, it doesn't appear on the stage. My firebug shows that swf loaded with status (304 Not Modified), means no problem.
Why i cannot see loaded swf content on the stage?
I'm trying to load swf like this:[code]but the problem is that some of the swf are in AS2 and their script don't excute (a simple stop() on the last frame is not executed and the movie loops)If I remove loader_context.securityDomain= SecurityDomain.currentDomain;it works, the AS2 files scripts are executed but flash throws a security error for the swf that come from a different domainSo I'm wondering if there is a way in an AS3 file to load AS2 swf from another domain ?
View 1 RepliesRegexp for AS3 to get the domain name from URL?[URL]
View 2 RepliesWhen trying to load a swf from a domain different from my swf's domain, I get this error[code]...
View 2 Replies