Hi,
It's more about risk assessment and minimising it than how to keep
it safe. If your data is so sensitive that joe public should not see it
then allowing access to the data over the internet is probably a bad
thing to do...
Otherwise, if it's not hugely sensitive, perhaps personal
information or commercial information that you need to restrict from
just anyone using, you can try to reduce the risk of the data falling
into the wrong hands by restricting access to it - e.g. password protect
the data. Then your weakest link is the people themselves (assuming
your code does not have bugs). If you just have a system that does not
let the people accessing it change the text data or their account
details, then that can be made safe reasonably easily - simplest way is
basic HTTP Authentication using htaccess / htpasswd on Apache to
restrict access to the url's with Flash, etc. on.
Once you start allowing people to change things like content and
passwords, etc., then it becomes more risky - more possibility of bugs /
exploits cropping up.
So, you need to weigh up how bad it is if your text gets out (cost /
reputation / business wise) vs how strong you need to make your security
(money / time programming it in). Someone will always find a way to
break in, if you can keep that to an acceptable minimum, you are on a
winner.
AMFPHP did support some sort of "authentication" system out of the
box, but I don't know much about this - check out the doc's...
Glen
webmastermack wrote:
Good points have been raised. Thank you for quick your feedback!
Does anyone have recommendations for keeping text data as safe as possible? Is
there a different track I should be taking? (I am open to leaving the Flash
environment as well)
-Webmaster Mack
_______________________________________________
Flashcoders mailing list
[email protected]
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders
--
Glen Pike
01326 218440
www.glenpike.co.uk <http://www.glenpike.co.uk>
_______________________________________________
Flashcoders mailing list
[email protected]
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders
