What do you mean by "Whatever you fear about security using Flex is equally applicable to Flash." ?
On Jan 26, 2008 10:57 PM, Paul Andrews <[EMAIL PROTECTED]> wrote: > ----- Original Message ----- > From: "Omar Fouad" <[EMAIL PROTECTED]> > To: "Flash Coders List" <[email protected]> > Sent: Saturday, January 26, 2008 8:23 PM > Subject: [Flashcoders] Flash and Database Issue - Need Advice > > > > Alright, > > it's been two years since I begun developing flash websites, but only > now > > I > > understand the benefits of a database driven Flash online application. > > I am trying to figure out the different techniques, advantages and > > disadvantages of how Flash, Flex and AIR can connect to a database, and > > hence read - write data to it on run time. > > > > I've read a lot concerning this issue and what I need is some advice > from > > you flash experts, seen you have obviously more experience than me. > > What I've understand is that: > > > > 1 - Flash can only connect to database using a serverside script such as > > php; > > Generally true, though there is FlashSQL (just google it) - that's not an > endorsment. > > > 2 - Flex can connect to database using serverside scripts and can > connect > > to > > database directly (Flex 3), but it is a very bad idea since the swf > files > > can be decompliled and hence, the data can be accessed by anyone; > > Flex produces AS3 and from what I hear is currently resilient to > decomoilation. Since Flex produces AS3 code, Flash is as vulnerable to > decompilation as Flex, and definitely more so in pre AS3 versions. > Generally > speaking, it's far safer having a server side component than giving a Flex > or Flash program direct access to a database (again, there is FlexSQL). > > Although Flex 3 has database support, my understanding is that it still > requires server side scripting/database components - it's not accessing > the > database directly from the client. > > > 3 - AIR can connect to a local Database (SQLite), or can connect to an > > online database using serverside Scripts. > > Correct. > > > At this point, I've approached two ways to process database data with > > Flash... > > > > The first one is to Post data from flash to a php file, (with LoadVar) > --> > > PHP connects to the database, executes the queries, and returns to the > SWF > > a > > data string (using print or echo). > > The second way (and apparently the most used) is to let php print or > echo > > the data queried from the database, in an XML format that flash > Processes > > using the XML Class or whatsoever. > > > > Now here is the question... Which one is best, of those two methods? > What > > are the advantages, and disadvantages of each one? Which one can I use > to > > bulid a CMS based Application? > > I would go the XML route. You can use XML in both directions if you wish. > > For an CMS application I would use Flex every time. Whatever you fear > about > security using Flex is equally applicable to Flash. > > Paul > > > Thanks for your Time. > > > > And Best Regards. > > -- > > Omar M. Fouad - Digital Emotions > > http://www.omarfouad.net > > _______________________________________________ > Flashcoders mailing list > [email protected] > http://chattyfig.figleaf.com/mailman/listinfo/flashcoders > -- Omar M. Fouad - Digital Emotions http://www.omarfouad.net This e-mail and any attachment is for authorised use by the intended recipient(s) only. It may contain proprietary material, confidential information and/or be subject to legal privilege. It should not be copied, disclosed to, retained or used by, any other party. If you are not an intended recipient then please promptly delete this e-mail and any attachment and all copies and inform the sender. Thank you. _______________________________________________ Flashcoders mailing list [email protected] http://chattyfig.figleaf.com/mailman/listinfo/flashcoders

