Flex :: Protect Access="remote" Functions In CFCs From Snoopers?
May 22, 2009
One of the great features of CFCs is the ability to reuse the code for both a straight .cfm page and for Flex apps.
One such app that I devleoped uses Flex for its charting capabilities and needs access to a 'getResults()' function in the cfc.
All of this content is behind an authentication mechanism, but since the cfc will open itself up to a wsdl request:
[URL]
and will actually return the results to the browser if the URL query is crafted properly:
[URL]
What techniques have people used to protect the cfc from direct access UNLESS the request is coming directly from the CFML processor OR from Flex Remoting?
View 5 Replies
Similar Posts:
Sep 18, 2009
How do I access actionscript programs, such as functions, from remote as files without using the #include command?
View 0 Replies
Oct 4, 2010
I'm writing a communication system, using Actionscript 3 and C#. Flash is used to communicate with RTMP server and stream video and audio using RTMFP p2p, but the actual client logic is handled in C#.
What I want to be able to do, is allow users to share files between each other also using a direct p2p connection. I have got the RTMFP connection working but I need to access the IP address of the remote user so I can initiate a connection to send or receive files.
I looked at the Adobe docs but I can't see anything except how to access the farID.
Is there a way to get the IP of a RTMFP stream?
View 1 Replies
Nov 5, 2009
I seem to be getting the following error when I try to access a Remote Java class (on Spring/BlazeDS) from the Flex/Cairngorm application. I am going crazy at the moment trying to see what is wrong
[Code]...
View 2 Replies
Jul 31, 2010
I tried to deploy my otherwise working flex app on a web server (tomcat 6).It threw a Channel.Security.Error.After some research, I became aware that flash movie loaded from flash_movie_domain will not be able to load resource from any other domain.Some suggested adding a crossdomain.xml.However, the crossdomain.xml route doesn't quite make sense.In this case, I am loading resources from a third party web site.My understanding is that I need this third party website to include a crossdomain.xml on their root directory in order for app to function.The third party web service is provided as is. I will not be able to change what's given. Since the third party is providing public access, it already explicitly give permission to the general public. Adding a crossdomain.xml to their root seems to be a redundant act?
View 1 Replies
Jul 13, 2011
I have an Adobe Flex application that needs to call C++ functions from a dll .Since Flex apps execute within the browser, is there any way to do this ?
View 3 Replies
May 1, 2011
I uses AS3 preloader embedded within HTML (standard Dreamweaver embedding). The preloader loads index.swf. I've noticed that site visitor can write down URL: [URL] and get direct access to the swf file of preloader. Hotlinking protection for swf extension (defined on server via cPanel) would resolve the problem but unfortunately [URL] must have access to swf files (otherwise flash site wonâ't start).
View 3 Replies
Jun 29, 2011
I want to develop a GWT javascript application that must interact with a flex widget and fire events from 2 directions (flex to GWT and GWT to flex)For example I develop a function in GWT called onWidgetSelected(int widgetID){ ...} the generated javascript code does not contain the name of this function. So If I want to invoke it from flex through javascript call what should I do ?
View 2 Replies
Aug 18, 2010
I would like to protect my flash files. I would like to block any decompilers,protect actionscript and also protect graphics. Some time ago,I tried to decompile a swf and when I placed it inside a decompiler , it showed me a login form and no graphics.I believe that is the ultimate protection method.Do you have any idea what software can do that ?
View 2 Replies
May 20, 2010
We have a very large SWF hosted in a website which is just a repository of hundreds of movies/symbols. We load this SWF at the beginning with the Loader class but then the client will access a very few of them at that moment. Is it possible to tell the loader to download symbols only when they're needed? (as with applicationDomain.getDefinition(...)).
View 4 Replies
Oct 24, 2011
Ive been able to setup FMS 4.5 and stream RTMP videos locally from a webcam stream but if i try to access it remotely i cant get a connection. Ive forwarded port 1935 through to my local IP from my router but still no connection, what do i need to configure on the servers end to tell it that its behind an NAT etc. Do i just add the public ip to the hostname line in the fms.ini, or is there more i need to do too? Do i log into the admin panel and change the server name from localhost to my public IP
View 3 Replies
May 4, 2011
I'm developing an android file by using flash cs5 air extention. I know the basic crossdomain policy and server to server connections. And I searched many pages but there is no solution about this.
My "container.apk" loads "external.swf" from the server.. And I want to be able to reach the variables and functions in "container.apk" from "external.swf". But I can't reach any function on my container (application file .apk) from my external module swf (remote file).. I mean, I'm trying to reach container.apk's functions from the loaded swf. Like when a button clicked on "external.swf" it should effect a function in "container.apk".
Also here are some error codes that I'm getting ;
[Code]...
View 1 Replies
Jun 20, 2009
Everything talks about accessing methods & variables.
Simple:
- I have a local flash file that is loading .swf files from a local directory, and playing them.
Code:
for (x=myBanners.length-1;x>-1;x--){
var bannerName:String = "banner" + (x+1);
var movieLocation:String = myBanners[x].firstChild.nodeValue;
[Code]....
View 2 Replies
Feb 4, 2007
I have this situation (simplified):
MC-A.swf opened from local computer (C:/) and loads MC-B.swf which is hosted on a server.
When MC-B.swf is loaded, it tries to access file called "loader.swf" which is also on local computer (C:/).
When it tries to access the "loader.swf" I get the following error message:
*** Security Sandbox Violation ***
Connection to file:///C|/loading.swf halted - not permitted from [URL]
-- Remote SWFs may not access local files.
I read discussions concerning this issue, and as I understood, I could use:
System.security.allowDomain("[URL]");
to solve this problem, but it didn't work.
I wouldn't like to change the loaded file to load it's resources also from the web, since it can find them on the local machine.
View 4 Replies
Aug 18, 2009
lod.load(new URLRequest(str2));how to unload the lod when second time i cal that function.how to over come this (*** Security Sandbox Violation ***SecurityDomain )
View 1 Replies
Feb 22, 2010
I am trying to access a FTP server that allows anonymous access to the data files stored on the server.. they are stored as txt files... I want to display some of the files in a flash CS4 Movie... It is also on a HTTP server directory...
I have accomplished it within the CS4 Flash development application using the HTTP Server but when I publish the document it gives me a blank stage the data that shows in the Test Movie swf is not showing when the SWF is on its own... I am thinking it has something to do with crossdomain security that is built in... is there a way I can accomplish this? I prefer the FTP access but will use the HTTP access...
Here is the AS3 I am using...
import flash.net.URLLoader;
import flash.net.URLRequest;
import flash.events.Event;
[Code].....
View 13 Replies
Feb 7, 2010
I have a flash file located on a web server. When it's loaded, I want it to access the user's PC and display some data (such as file directories, files, etc)I know there are security rules about what a flash player can access, but so far all I can seem to find are rules regarding local flash players accessing the internet, but not much on the other way around, or how do go about doing that.
View 0 Replies
Jun 6, 2010
How do I get the movie to access and download a remote pdf or other file on my server?
View 2 Replies
Sep 24, 2010
Is there an easy copyprotection, so that I can define in code the URL where flash/flex app can be executed
View 1 Replies
Aug 1, 2010
it is possible to protect a .swf file from decompilation?i've been reading about compiling class libraries in a .swc file for distribution without revealing the code - possibly selling it. however, there are .swf decompilers you can use to expose the code, and a .swc file is simply a .zip archive, so changing myswc.swc to myswc.zip will reveal the .swf files of the library.
View 2 Replies
Sep 18, 2010
It has just occurred to me that when my Flex application does a ChannelSet.login, it is essentially sending the username and password over the wire in an unencrypted form to the BlazeDS server. While I use the binary AMF protocol over an AMFChannel, it would take nothing for somebody to sniff these passwords.
Most of my clients do not want to run their application on an https (SSL) protected site. So what is the best way to do this? I use Spring security on the backend to do authentication.
Should I encrypt the credentials myself before calling login? I guess then I would need to know the server-side encryption algorthym.
View 2 Replies
Apr 16, 2011
[Code]...
with the code above how would you call the function clicker from the function clicker2? as with the code i have it comes up with the error "1084: Syntax error: expecting rightparen befor colon")
View 7 Replies
Feb 13, 2011
Got a public funtion within lights.as file called turnLightsOn.
Now I need to access this from the time line actions - I need to place it within an oncompletion function.[code]...
HOW do I paste an example of my code on this forum? It would be best for folks to see all the code?
View 1 Replies
Aug 10, 2011
I have:Stage -> SWF Loader Root -> SWF Loader -> MovieClip -> Nested MC.From within "Nested MC": I can only access "SWF loaders root" time line, I can't seem to get access to the stage's functions..[code]Im trying to call on a function which resides on the main time line.Is there any way to access the main timeline?
View 1 Replies
Dec 13, 2011
I'm coding a small flash game, and wan't to access different functions between classes. In C# I'm used to just making it static, but I'm having some problems with it.Here goes:
Main.as
package
{
import Bus;[code].............
View 3 Replies
Dec 21, 2011
I'm building a small game in AS3, and I have a lot of helper functions, so I've created Helper.as, just to clean it up.[code]...
View 1 Replies
Feb 8, 2009
From my external app I can see the functions and variables with a for-in loop of the loaded swf, but it can't access the functions. I've also tried accessing the variables and functions in the external app also to no avail.
View 1 Replies
Mar 30, 2011
In Flash user can give permission to localhost and even local html file to access remote webservice.I fail to see the same thing for Silverlight which is a nightmare for testing on local pc.
View 1 Replies
Nov 25, 2010
As above is there a way to access any function written inside main timeline from a class?
View 1 Replies
Jul 30, 2009
how to access functions on my main SWF file from a loaded SWF file?
View 13 Replies
