Wouldn't it also be helpful to have the server-side script verify (validate) the data the swf is sending back up? That way if someone manually triggered the date, the server would not accept it because it doesn't match it's system date.

Don.


On 3/11/2011 10:31 AM, John McCormack wrote:
Kevin,

On start-up the SWF could request the date of data transfer from a server script. The script would return it from the database in encrypted form to bypass sniffers.

When the date is reached, and data requested, the PHP script could compare current server date and date from the database. If different, ignore it.

Henrik's phrase "You clearly haven't heard of HTTP request sniffers." is discouraging. We all make errors, unfortunately.

On the other hand, he comes up with lots of useful information for which we are grateful.

John

On 10/03/2011 18:35, Kevin Holleran wrote:
I'll explain further so I get valuable responses and avoid the sarcasm. My goal is to pass in the date from the server, the application counts down, and when the date hits a certain time, the application does something. This
something that the application does will also be loaded by calling a PHP
script that will load from a backend DB. My concern is someone being able
to launch the SWF passing in an incorrect date that will trigger this
something early.

Thanks for your help.

Kevin
_______________________________________________
Flashcoders mailing list
[email protected]
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders




_______________________________________________
Flashcoders mailing list
[email protected]
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders



_______________________________________________
Flashcoders mailing list
[email protected]
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders

Reply via email to