Well you can change it right there in the browser by
calling methods on the movie object and setting variables.

It is important to keep anything like that on the server
side, as you can see with a lot of online flash games
with high incredible hiscores, etc.

I did this a couple of times to test security on sub-contractors
code for clients and it was quite embarrassing for them, not
to mention a potential security and PR disaster that can sink
a company if it is a non-trivial environment.

The best way is to have a well defined server api and let the 
flash client speak to that using xml, etc. The api can implement
role based security and catch any attempts to subvert it by 
checking against known state or whatever.

An easy example would be having different asp pages (or one that
processes all commands) that accept query strings (or xml) and
return xml.

e.g.

instead of having "select * from clients" in your flash code,
you would call getClientList.asp?blah=blah&etc which would
check that the (authenticated)client had permissions to get
a client list and then generate and return the xml from 
sql statements.

Hope that helps
~neo


-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of mike cann
Sent: 13 July 2006 12:45 PM
To: Flashcoders mailing list
Subject: Re: [Flashcoders] Flash SQL

this doesnt sound like a good idea as anyone can download your .swf and
decompile it then change that SELECT * statement to a DROP statement with
ease.

On 12/07/06, Jose Maria Barros <[EMAIL PROTECTED]> wrote:
>
> Now im working on a project that involves SQL Server, ASP , XML and 
> flash..and i think its so difficult to work with this for me..
> Maybe tthis component whill help..but not much..
>
> Im not a good coder..so maybe this help
>
> On 7/12/06, jcarlos <[EMAIL PROTECTED]> wrote:
> >
> > it seems to be interesting
> >
> > But I didn´t see any Stored Procedure based example
> >
> > Isn´t  this SQL open way of dB query not very recommended since it
> exposes
> > your persistence logic, tables and so on ???
> >
> > I´m not an n-layers app expert but I found this arguments very often
> ....
> >
> > João Carlos
> >
> > ----- Original Message -----
> > From: "Tunç Atakan" <[EMAIL PROTECTED]>
> > To: "'Flashcoders mailing list'" <[email protected]>
> > Sent: Wednesday, July 12, 2006 9:39 AM
> > Subject: RE: [Flashcoders] Flash SQL
> >
> >
> > > http://www.netdrims.com/flashsql/
> > >
> > >
> > > Anybody use this component?
> > >
> > > I need comment?
> > >
> > > Thanx...
> > >
> > > Tunc
> > >
> > >
> > >
> > > _______________________________________________
> > > [email protected]
> > > To change your subscription options or search the archive:
> > > http://chattyfig.figleaf.com/mailman/listinfo/flashcoders
> > >
> > > Brought to you by Fig Leaf Software Premier Authorized Adobe 
> > > Consulting and Training http://www.figleaf.com 
> > > http://training.figleaf.com
> >
> > _______________________________________________
> > [email protected]
> > To change your subscription options or search the archive:
> > http://chattyfig.figleaf.com/mailman/listinfo/flashcoders
> >
> > Brought to you by Fig Leaf Software
> > Premier Authorized Adobe Consulting and Training 
> > http://www.figleaf.com http://training.figleaf.com
> >
> _______________________________________________
> [email protected]
> To change your subscription options or search the archive:
> http://chattyfig.figleaf.com/mailman/listinfo/flashcoders
>
> Brought to you by Fig Leaf Software
> Premier Authorized Adobe Consulting and Training 
> http://www.figleaf.com http://training.figleaf.com
>
_______________________________________________
[email protected]
To change your subscription options or search the archive:
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders

Brought to you by Fig Leaf Software
Premier Authorized Adobe Consulting and Training http://www.figleaf.com
http://training.figleaf.com

_______________________________________________
[email protected]
To change your subscription options or search the archive:
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders

Brought to you by Fig Leaf Software
Premier Authorized Adobe Consulting and Training
http://www.figleaf.com
http://training.figleaf.com

Reply via email to