Professional :: Preventing Remote Url File Reads In Flash?
Oct 29, 2010
We have a Flash application provided by a vendor. It reads its parameters from an xml file on our web server's file system. However, it can also be spoofed to read its parameters from an xml file sitting on another domain's web server. At first we thought crossdomain.xml might be able to fix this, but we've researched it and understand the purpose of crossdomain.xml. It won't solve this issue.Are there any ways of enforcing that a Flash application reads its input file only from the same server where the Flash application was served? Or is the recommendation just to initialize variables within the Flash app, not relying on an external file.
I'm an application developer, and my standard usage of Flash is as follows: I'm creating an executable application, which contains a ShockwaveFlash object instance, which in turn is displaying a Flash Movie Clip - also created by myself. The executable application and the contained Flash clip are communicating via the ActionScript ExternalInterface (using XML strings) and the FSCommand.
I'd like to be able to debug the ActionScript code of the Flash file while I'm running/debugging my executable application. For that, I need to be able to start a remote debugging session from the Flash object running inside my executable. Problem is, I did not find any way of doing this.
When I publish the Flash SWF file with "permit debugging" checked, I'm able to start a remote debugging session when I'm displaying the file in a player or a browser (the "debugging" option is shown at the right-click menu of the Flash object), but I'm not able to do the same with the object inside my executable (the "debugging" option doesn't exist on the menu).
Environment Details: The executable application is using the ShockwaveFlash COM file to create the ShockwaveFlash object. The executable application is created using VB.NET, Visual Studio 2008, .NET 3.5. The Flash SWF file is created using Adobe Flash Professional CS4. I'm developing under Windows XP (SP3).
the situation | an instance of the DateChooser component reads an xml file which houses info for homework assignments and their due dates. if there is a due date, make sure that date is highlighted on the DateChooser component. from what i've been told, the xml file stores urls which will tell if there is s/thing due on a particular date. the xml file | very simple, has an <activity> element with a 'date' attribute, i.e.
[Code]...
my remaining questions | What needs to happen as soon as the xml file is loaded? i.e. do i call a function which parses the xml data and puts it into an array? then the DateChooser component iterates thru the array looking for boolean values noting if there is an activity or not and if so, on which day. if it finds one, it sets its highlight property to true for that particular day. i'm setting up the xml file correctly.
I have two variables that I would like to store in a remote data file which can be accessed by my Flash file. It is for a voting system, so the first variable would be a counter that is incremented each time a user votes, and the second would be the total rating. The average rating would then be calculated from these.
How would one store, retrieve, and then update these variables from the data file?
I can create the system within a single Flash file for a single session, but obviously I'd like multiple users opening the file simultaneously to be able to access the data and update it.
My client has asked me to provide a template for an investor relations section of their website. The HTML page or template for this page will be at the service providers site, but all the images etc. for the page will be linked to files on my clients server. Everything looks fine, but the absolute URL's in the .swf file back to my clients site aren't working.
This is what the service provider's guidlines say, but I'm not sure where the code is supposed to go:
Similarly, newer versions of the Flash Media Player installed by most users have a high level of security enabled by default. This is done to prevent Flash movies from playing on web pages that are hosted on different domains than the movie itself (again, to combat "phishing" or "spoofing").
I'm starting a blog with a hosted wordpress instance and i would like to be able to stream music using a flash player on some posts.The problem is that every player i find uses a simple param to get the file url which makes it very easy for someone to find that url and just download the file.I know that it's probably impossible to prevent this all together, but i at least don't want it to be obvious.
I am trying to make a links box that reads data from a XML file and inturn generates all the buttons and when clicked on will open the specific page in a new browswer window.this is what I have so far: a box that reads the XML, makes individual buttons and a scroller to see all the links if there are more than what can be displayed. See example HERE. Here is the code for the actionscript...
I stayed up all night building an application on cs5.5 that needs to keep running for up to an hour without the screeen dimming or the device going to sleep. After a lot of googling I could not find anything. Is there a way to emulate or trick the system and make it think that there is user interation ? Or is there an option I can change to make this work? I am testing on an ipod touch 4g
I am able to successfully use the "Live View" function within CS4. I am also able to successfully preview within IE and Firefox. I've put all files in the appropriate location on the remote server. All files are in my /wwwroot/, except the two files that are in the Script folder, which is in my root. My domain host claims flv files are supported, and Adobe technical support eperiences the same behavior as I, they can play locally, but not remotely. Adobe technical support claims the cause of the problem is the remote server.
I have been using flash for years deploying video for the web.For the life of me I cannot get my .FLV file to import into Flash from my URL.It's already on the server here is the address.I've always used this method.The only thing that is different is I'm now using GoDaddy to host my site instead of 1and1. http:[url]...........I do have the .F4V locally on my machine but I've never been able to get that to play from the remote server... meaning-
I import .F4V file locally into flash.I create a .swf file and place that in the same folder as the.f4v.I use GoLive to make my webpages.I create my webpage and import my .swf and .flv into the html webpage. It plays great locally on my machine.When I upload everything uploads. When I check it all out online, I get no video.
I have a 30 sec flash file that was converted from a .flv to .swf in flash CS5.I place the .swf file in Dreamweaver CS5.The file is only 57k the .flv was 3,560k. The flash plays perfect locally.When uploaded thru the "put" function with Dreamweaver the .swf file uploads along with the java and expessistall.swf. The flash will not display on the website.
need to create a simple application that will essentially function as a remote slideshow broadcast service. One presenter will see the show (full screen) and will be able to proceed to the next slide, all other attendees will only see the show (no control) and will see the next slide when the presenter proceeds. I have a Flash Media Interactive Server which can be utilized.
I want my app (AIR app ported on iOS) to be able to show file located on the remote server and open it with default app (if there's one on device). Is it possible (maybe one can somehow use openWithDefaultApp here)?
UPD: I succeed with downloading (into File.documentsDirectory). I can't force iPad to open downloaded files.
UPD2: I tried to use both openWithDefaultApp and NavigateToUrl.
i'd like to know if this is possible: currently i have a file menu.xml which contains menu information 2 levels deep (main menu, sub menus). this i am reading into flash and generating the menu. i would like to change this process:
1. call a php script which creates the xml output and using headers sends that data back into flash. sending and loading vars is no problem.
how Flash reads the PHP coding which was generated from the MySQL database.Though, I was wondering if anyone can help me with this task and/or clear stuff up. All I want to do is grab a single video file, when on the video.php page.the video.php will have the parameter, video.php?id=____ and than the PHP coding in the header will grab the database info for that video. Though, do I have to create a separate page for the flash to grab that information?Like, I notice that for Flash to grab that info, PHP needs to set it up like so:
Code:
vid=test.flv&title=title...
and ect. Though, do I have to echo this part out, or do I have to send that PHP info and create a page from it, than have flash grab the information from that 2nd page?
how Flash reads the PHP coding which was generated from the MySQL database.Though, I was wondering if anyone can help me with this task and/or clear stuff up. All I want to do is grab a single video file, when on the video.php page. So, the video.php will have the parameter, video.php?id=____ and than the PHP coding in the header will grab the database info for that video. Though, do I have to create a separate page for the flash to grab that information?Like, I notice that for Flash to grab that info, PHP needs to set it up like so:
Code: Select allvid=test.flv&title=title...
and ect. Though, do I have to echo this part out, or do I have to send that PHP info and create a page from it, than have flash grab the information from that 2nd page?
I have a problem loading remote XML file into SWF file. Im doing a banner for a client with adds that is supose to load constantly updated XML file from my clients server and load some images into flash form it. Everything works fine when i test the movie (CTRL+ENTER), but when i publish it and test it from explorer, XML file is just not loading into flash.
The screen reader (JAWS) is able to read the textfield in flash on Google's Chrome but not in Internet Explorer 8. I'm using the latest version of swfobject.
In Flash user can give permission to localhost and even local html file to access remote webservice.I fail to see the same thing for Silverlight which is a nightmare for testing on local pc.
I installed the update to Flash 8 that allows for remotedebugging, and I had it all set up and working over the past weekor two. But, all of a sudden it's not working for me anymore.I wasable to access it by right clicking my movie from within thebrowser and selecting "Debugger", but for some reason the optionisn't available anymore. I've rechecked my settings according tothe livedocs, and ensured the swd file is in the same dir as theswf, but no dice.
edit: Resolved; my ActionScript function for parsing the mySQL results didn't correctly interpret a recently modified column, and the corrupted new output happened to be identical to the old output.
I have created an application that accesses a PHP/mySQL database, but it caches old information.
I used the workaround from Adobe's website, where I append '+ new Date().getTime()' to the URLRequest String, but the application continues to use the old data.
When I trace the URLRequest String and C&P it into a browser window, however, I receive the correct data.
This seem like a silly question but as far as I've found: It's impossible to reload an xml file from a remote location while the SWF is running.
For example, I have a kiosk project that will run 24/7 (with a restart each night). I have an "calendar events" loading off an XML file that I want to keep on a webserver so I can update the kiosk by editing the XML file. However, the SWF caches the first XML file and keeps reusing it. I'm testing this by triggering a function that reloads the XML file with a button click.
I found trick that concats a unique ID to the file name which prevents using the old file but that means I'll have an ever growing list of XML files in the Temporary Internet Files folder.
I would like to do a URLRequest to a PHP file which contains xml, and the PHP file will be living on a seperate server from my flash file. I understand there are security issues in this sort of thing. figure out how to make this work?
I'm trying for making out application for vod.I want to know how a user can make his file readable by the AMS for vod when file is at different PC and AMS( includes swf and HTMl files) is at different PC.
When I set the 'Publishing Setting' to 'Permit Debugging', Flash never generates the swd file when the target script language is AS3.If I change the script language to AS2 it generates it.I have tried on CS3 and CS5.how to generate this swd file for AS3 projetcs?I have tried with large files and with empty files always with the same result.
