Re: [Flashcoders] Getting Data into my SWF

2011-03-15 Thread Kevin Holleran
On Mon, Mar 14, 2011 at 5:31 PM, Henrik Andersson he...@henke37.cjb.netwrote:

 Jordan L. Chilcott - Interactivity Unlimited skriver:

  Unless the client is actually displaying a countdown, it has no need for
 the data. All the client needs in this case is a polling mechanism to occur
 on a set interval, whether or not it intends to display any countdown down.
 No data needs to be pass back to the server. All the client is essentially
 asking is coupon?. Server either gives a coupon or something else that is
 of no use for anyone to manipulate.

 jord


 To elaborate on that idea:

 Client asks the server and the server either sends the coupon or the time
 left. The client then acts differently depending on the received data. This
 way there is only one request made in either case.

 ___
 Flashcoders mailing list
 Flashcoders@chattyfig.figleaf.com
 http://chattyfig.figleaf.com/mailman/listinfo/flashcoders



I like that!  Good call, much more efficient.  The countdown is displayed so
that date is important.  I like the single call that way.

Thanks again.

Kevin
___
Flashcoders mailing list
Flashcoders@chattyfig.figleaf.com
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders


Re: [Flashcoders] Getting Data into my SWF

2011-03-15 Thread Jordan L. Chilcott - Interactivity Unlimited
In this case, you just manipulate the time on the client side for the user's 
amusement (if they try to tamper with it, the next call will just reset the 
values, if it's not time yet).

jord
-- 
Jordan L. Chilcott

Sent from my iPhone... because I can

On 2011-03-15, at 1:06 PM, Kevin Holleran kdaw...@gmail.com wrote:

 I like that!  Good call, much more efficient.  The countdown is displayed so
 that date is important.  I like the single call that way.

___
Flashcoders mailing list
Flashcoders@chattyfig.figleaf.com
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders


Re: [Flashcoders] Getting Data into my SWF

2011-03-15 Thread Kevin Newman

This is the perfect opportunity to introduce a clever Easter egg. ;-)

Kevin N.


On 3/15/11 1:35 PM, Jordan L. Chilcott - Interactivity Unlimited wrote:

In this case, you just manipulate the time on the client side for the user's 
amusement (if they try to tamper with it, the next call will just reset the 
values, if it's not time yet).

jord


___
Flashcoders mailing list
Flashcoders@chattyfig.figleaf.com
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders


Re: [Flashcoders] Getting Data into my SWF

2011-03-14 Thread Henrik Andersson

Developer skriver:

Wouldn't it also be helpful to have the server-side script verify
(validate) the data the swf is sending back up?
That way if someone manually triggered the date, the server would not
accept it because it doesn't match it's system date.

Don.




You have a point. The server can reject anything that the client sends.

But at the same time you also fail to get it. The client doesn't have to 
care for what the server does. So what if the server doesn't like the 
date? The client has no obligation to care about that.


___
Flashcoders mailing list
Flashcoders@chattyfig.figleaf.com
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders


Re: [Flashcoders] Getting Data into my SWF

2011-03-14 Thread Developer

No, I get it. The client and data transfer are insecure.

The hidden information (or the trigger to show the information) should 
come from the server not from the client.


Don


On 3/14/2011 3:54 AM, Henrik Andersson wrote:

Developer skriver:

Wouldn't it also be helpful to have the server-side script verify
(validate) the data the swf is sending back up?
That way if someone manually triggered the date, the server would not
accept it because it doesn't match it's system date.

Don.




You have a point. The server can reject anything that the client sends.

But at the same time you also fail to get it. The client doesn't have 
to care for what the server does. So what if the server doesn't like 
the date? The client has no obligation to care about that.


___
Flashcoders mailing list
Flashcoders@chattyfig.figleaf.com
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders




___
Flashcoders mailing list
Flashcoders@chattyfig.figleaf.com
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders


Re: [Flashcoders] Getting Data into my SWF

2011-03-14 Thread John McCormack
If the server script knows the acceptable date from the database, it can 
just ignore early requests.


Is the problem that Kevin doesn't want the client swf to hold the date 
for fear of it being known?


If so, a key could be sent instead that relates to the download date and 
stored in the database. Each time the swf runs it sends the key and the 
server checks that against the date.


John

On 14/03/2011 12:19, Developer wrote:

No, I get it. The client and data transfer are insecure.

The hidden information (or the trigger to show the information) should 
come from the server not from the client.


Don


On 3/14/2011 3:54 AM, Henrik Andersson wrote:

Developer skriver:

Wouldn't it also be helpful to have the server-side script verify
(validate) the data the swf is sending back up?
That way if someone manually triggered the date, the server would not
accept it because it doesn't match it's system date.

Don.




You have a point. The server can reject anything that the client sends.

But at the same time you also fail to get it. The client doesn't have 
to care for what the server does. So what if the server doesn't like 
the date? The client has no obligation to care about that.


___
Flashcoders mailing list
Flashcoders@chattyfig.figleaf.com
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders




___
Flashcoders mailing list
Flashcoders@chattyfig.figleaf.com
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders





___
Flashcoders mailing list
Flashcoders@chattyfig.figleaf.com
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders


Re: [Flashcoders] Getting Data into my SWF

2011-03-14 Thread Kevin Holleran
Thanks to everyone for all of your responses.

What is going to happen, is the application is going to hold a coupon.  That
coupon will be retrieved from a database and passed into the Flash
application.  I guess as I am writing this, the script will just check the
date and if it is not correct, it can simply not return the coupon.  My
question revolved around a user manipulating the date passed into the flash
application and causing the coupon to show up before the countdown is really
up.

Thanks very much.
Kevin


On Mon, Mar 14, 2011 at 2:59 PM, John McCormack j...@easypeasy.co.ukwrote:

 If the server script knows the acceptable date from the database, it can
 just ignore early requests.

 Is the problem that Kevin doesn't want the client swf to hold the date for
 fear of it being known?

 If so, a key could be sent instead that relates to the download date and
 stored in the database. Each time the swf runs it sends the key and the
 server checks that against the date.

 John


 On 14/03/2011 12:19, Developer wrote:

 No, I get it. The client and data transfer are insecure.

 The hidden information (or the trigger to show the information) should
 come from the server not from the client.

 Don


 On 3/14/2011 3:54 AM, Henrik Andersson wrote:

 Developer skriver:

 Wouldn't it also be helpful to have the server-side script verify
 (validate) the data the swf is sending back up?
 That way if someone manually triggered the date, the server would not
 accept it because it doesn't match it's system date.

 Don.



 You have a point. The server can reject anything that the client sends.

 But at the same time you also fail to get it. The client doesn't have to
 care for what the server does. So what if the server doesn't like the date?
 The client has no obligation to care about that.

 ___
 Flashcoders mailing list
 Flashcoders@chattyfig.figleaf.com
 http://chattyfig.figleaf.com/mailman/listinfo/flashcoders



 ___
 Flashcoders mailing list
 Flashcoders@chattyfig.figleaf.com
 http://chattyfig.figleaf.com/mailman/listinfo/flashcoders




 ___
 Flashcoders mailing list
 Flashcoders@chattyfig.figleaf.com
 http://chattyfig.figleaf.com/mailman/listinfo/flashcoders

___
Flashcoders mailing list
Flashcoders@chattyfig.figleaf.com
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders


Re: [Flashcoders] Getting Data into my SWF

2011-03-14 Thread Henrik Andersson

Kevin Holleran skriver:

Thanks to everyone for all of your responses.

What is going to happen, is the application is going to hold a coupon.  That
coupon will be retrieved from a database and passed into the Flash
application.  I guess as I am writing this, the script will just check the
date and if it is not correct, it can simply not return the coupon.  My
question revolved around a user manipulating the date passed into the flash
application and causing the coupon to show up before the countdown is really
up.



Well, in that case the server has a chance to withhold data until it is 
satisfied, so that should be perfectly hacking proof.

___
Flashcoders mailing list
Flashcoders@chattyfig.figleaf.com
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders


Re: [Flashcoders] Getting Data into my SWF

2011-03-14 Thread Jordan L. Chilcott - Interactivity Unlimited
Why would you be relying solely on a user's clock? That is most easily 
manipulated simply by changing the date and time in their system preferences.

No hacking experience required.

jord
-- 
Jordan L. Chilcott

Sent from my iPhone... because I can

On 2011-03-14, at 3:06 PM, Kevin Holleran kdaw...@gmail.com wrote:

 What is going to happen, is the application is going to hold a coupon.  That
 coupon will be retrieved from a database and passed into the Flash
 application.  I guess as I am writing this, the script will just check the
 date and if it is not correct, it can simply not return the coupon.  My
 question revolved around a user manipulating the date passed into the flash
 application and causing the coupon to show up before the countdown is really
 up.
 

___
Flashcoders mailing list
Flashcoders@chattyfig.figleaf.com
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders


Re: [Flashcoders] Getting Data into my SWF

2011-03-14 Thread Kevin Holleran
@Jord - The date will be passed in or retrieved from a script and would be
the server date.  My concern was that the date would be intercepted/modified
in some fashion, but since the end result is retrieved from the server, the
server script will just have a check to make sure the date is right to
release it.

Thanks for all the ideas from everyone, I enjoyed the discussions.  I'm sure
I'll be asking more questions as I move through this project.

Kevin


On Mon, Mar 14, 2011 at 3:17 PM, Jordan L. Chilcott - Interactivity
Unlimited jchilc...@interactivityunlimited.com wrote:

 Why would you be relying solely on a user's clock? That is most easily
 manipulated simply by changing the date and time in their system
 preferences.

 No hacking experience required.

 jord
 --
 Jordan L. Chilcott

 Sent from my iPhone... because I can

 On 2011-03-14, at 3:06 PM, Kevin Holleran kdaw...@gmail.com wrote:

  What is going to happen, is the application is going to hold a coupon.
  That
  coupon will be retrieved from a database and passed into the Flash
  application.  I guess as I am writing this, the script will just check
 the
  date and if it is not correct, it can simply not return the coupon.  My
  question revolved around a user manipulating the date passed into the
 flash
  application and causing the coupon to show up before the countdown is
 really
  up.
 

 ___
 Flashcoders mailing list
 Flashcoders@chattyfig.figleaf.com
 http://chattyfig.figleaf.com/mailman/listinfo/flashcoders

___
Flashcoders mailing list
Flashcoders@chattyfig.figleaf.com
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders


Re: [Flashcoders] Getting Data into my SWF

2011-03-14 Thread Jordan L. Chilcott - Interactivity Unlimited
If I'm getting this straight:

You're asking for a date from the server which you're going to pass back for 
approval to show a coupon on the client side app.

Why not just have the server store and send the coupon for the application to 
use? The client simply makes one call (two at most... but it can be handled in 
one call, letting the server do all the work - the client is a simple willing 
participant). No other data is passed back for the client to manipulate. 

jord
-- 
Jordan L. Chilcott

Sent from my iPhone... because I can

On 2011-03-14, at 3:40 PM, Kevin Holleran kdaw...@gmail.com wrote:

 @Jord - The date will be passed in or retrieved from a script and would be
 the server date.  My concern was that the date would be intercepted/modified
 in some fashion, but since the end result is retrieved from the server, the
 server script will just have a check to make sure the date is right to
 release it.
 

___
Flashcoders mailing list
Flashcoders@chattyfig.figleaf.com
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders


Re: [Flashcoders] Getting Data into my SWF

2011-03-14 Thread Kevin Holleran
On Mon, Mar 14, 2011 at 3:57 PM, Jordan L. Chilcott - Interactivity
Unlimited jchilc...@interactivityunlimited.com wrote:

 If I'm getting this straight:

 You're asking for a date from the server which you're going to pass back
 for approval to show a coupon on the client side app.

 Why not just have the server store and send the coupon for the application
 to use? The client simply makes one call (two at most... but it can be
 handled in one call, letting the server do all the work - the client is a
 simple willing participant). No other data is passed back for the client to
 manipulate.

 jord
 --
 Jordan L. Chilcott

 Sent from my iPhone... because I can

 On 2011-03-14, at 3:40 PM, Kevin Holleran kdaw...@gmail.com wrote:

  @Jord - The date will be passed in or retrieved from a script and would
 be
  the server date.  My concern was that the date would be
 intercepted/modified
  in some fashion, but since the end result is retrieved from the server,
 the
  server script will just have a check to make sure the date is right to
  release it.
 

 ___
 Flashcoders mailing list
 Flashcoders@chattyfig.figleaf.com
 http://chattyfig.figleaf.com/mailman/listinfo/flashcoders




The engine is a countdown from the current date/time to the date/time when
the coupon becomes visible.  So the date is used for the counter and then
once the counter reaches zero, the coupon is retrieved from the server and
displayed.

Kevin
___
Flashcoders mailing list
Flashcoders@chattyfig.figleaf.com
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders


Re: [Flashcoders] Getting Data into my SWF

2011-03-14 Thread Jordan L. Chilcott - Interactivity Unlimited
Unless the client is actually displaying a countdown, it has no need for the 
data. All the client needs in this case is a polling mechanism to occur on a 
set interval, whether or not it intends to display any countdown down. No data 
needs to be pass back to the server. All the client is essentially asking is 
coupon?. Server either gives a coupon or something else that is of no use for 
anyone to manipulate. 

jord
-- 
Jordan L. Chilcott

Sent from my iPhone... because I can

On 2011-03-14, at 4:08 PM, Kevin Holleran kdaw...@gmail.com wrote:

 The engine is a countdown from the current date/time to the date/time when
 the coupon becomes visible.  So the date is used for the counter and then
 once the counter reaches zero, the coupon is retrieved from the server and
 displayed.
 
 Kevin

___
Flashcoders mailing list
Flashcoders@chattyfig.figleaf.com
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders


Re: [Flashcoders] Getting Data into my SWF

2011-03-14 Thread Henrik Andersson

Jordan L. Chilcott - Interactivity Unlimited skriver:

Unless the client is actually displaying a countdown, it has no need for the data. All 
the client needs in this case is a polling mechanism to occur on a set interval, whether 
or not it intends to display any countdown down. No data needs to be pass back to the 
server. All the client is essentially asking is coupon?. Server either gives 
a coupon or something else that is of no use for anyone to manipulate.

jord


To elaborate on that idea:

Client asks the server and the server either sends the coupon or the 
time left. The client then acts differently depending on the received 
data. This way there is only one request made in either case.

___
Flashcoders mailing list
Flashcoders@chattyfig.figleaf.com
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders


Re: [Flashcoders] Getting Data into my SWF

2011-03-13 Thread Kevin Newman

Hi Glen,

If you really want to keep people from seeing some data until a certain 
date (depending on how sensitive it is), you should probably keep a pair 
of swfs instead of just serving up the one.


You'd serve the pre-date swf before the event, then on the day of the 
event, you'd switch to serving the swf with the new data. That way no 
amount of snooping will allow a curious user to grab your restricted 
data, since you won't have served it up.


Really, keeping the data off the user's machine is the only way to 
prevent them from accessing it.


That said, some reasonable amount of obfuscation (funky named variables, 
encoded date info, etc.) could be used to at least make it less likely 
for novice snoopers to grab your restricted data. I'd only recommend 
that if the information is not terribly sensitive though.


Kevin N.


On 3/11/2011 4:53 AM, Glen Pike wrote:
Okay, so it is possible to change the date using a sniffer, but being 
as the majority of people don't tend to use sniffers, unless the guy 
is writing a critical application that flies planes or crashes them if 
the date is wrong then I would suggest that the risk assessment here 
would be to accept the fact that there are some people there who might 
use a sniffer and change the date.


if we all ran around with the attitude that you can't trust anyone, so 
what's the point, we would still be in the dark ages.




On 11/03/2011 09:45, Henrik Andersson wrote:

Glen Pike skriver:

Hello,

The parameters that you pass to the SWF in your HTML are different to
communicating with a back-end system.

If you look at URLLoader in actionscript. This enables you to load data
as you would load a web-page.

You would use URLLoader with your server-side code, e.g. PHP to do GET
and POST type requests:

This way, your users cannot inject their own date and it is also
possible to have login type facilities.



You clearly haven't heard of HTTP request sniffers. With something 
like Fiddler http://www.fiddler2.com/ I can easily override the 
reply from any server.


And no, SSL does not help there. I can authorize any certificate 
authority I feel like, including my own one.


And for any other checksum/validation I can always just edit the swf 
file to skip the check.


In the end it is the same ages old trusted client problem. You just 
can't protect code that runs on the client.

___
Flashcoders mailing list
Flashcoders@chattyfig.figleaf.com
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders




___
Flashcoders mailing list
Flashcoders@chattyfig.figleaf.com
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders


___
Flashcoders mailing list
Flashcoders@chattyfig.figleaf.com
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders


Re: [Flashcoders] Getting Data into my SWF

2011-03-13 Thread Developer
Wouldn't it also be helpful to have the server-side script verify 
(validate) the data the swf is sending back up?
That way if someone manually triggered the date, the server would not 
accept it because it doesn't match it's system date.


Don.


On 3/11/2011 10:31 AM, John McCormack wrote:

Kevin,

On start-up the SWF could request the date of data transfer from a 
server script. The script would return it from the database in 
encrypted form to bypass sniffers.


When the date is reached, and data requested, the PHP script could 
compare current server date and date from the database. If different, 
ignore it.


Henrik's phrase You clearly haven't heard of HTTP request sniffers. 
is discouraging. We all make errors, unfortunately.


On the other hand, he comes up with lots of useful information for 
which we are grateful.


John

On 10/03/2011 18:35, Kevin Holleran wrote:
I'll explain further so I get valuable responses and avoid the 
sarcasm.  My
goal is to pass in the date from the server, the application counts 
down,
and when the date hits a certain time, the application does 
something.  This

something that the application does will also be loaded by calling a PHP
script that will load from a backend DB.  My concern is someone being 
able

to launch the SWF passing in an incorrect date that will trigger this
something early.

Thanks for your help.

Kevin
___
Flashcoders mailing list
Flashcoders@chattyfig.figleaf.com
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders





___
Flashcoders mailing list
Flashcoders@chattyfig.figleaf.com
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders




___
Flashcoders mailing list
Flashcoders@chattyfig.figleaf.com
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders


Re: [Flashcoders] Getting Data into my SWF

2011-03-11 Thread Glen Pike

Hello,

The parameters that you pass to the SWF in your HTML are different 
to communicating with a back-end system.


If you look at URLLoader in actionscript.  This enables you to load 
data as you would load a web-page.


You would use URLLoader with your server-side code, e.g. PHP to do 
GET and POST type requests:



http://help.adobe.com/en_US/FlashPlatform/reference/actionscript/3/flash/net/URLLoader.html



http://help.adobe.com/en_US/as3/dev/WS5b3ccc516d4fbf351e63e3d118666ade46-7ee2zephyr_serranozephyr.html


This way, your users cannot inject their own date and it is also 
possible to have login type facilities.


This way, what flash is doing is putting the pretty skin over your 
application.  The difference from HTML is that you stay on the same page 
and make requests similar to Ajax.


This site might have some good tutorials to get you started.

http://www.flash-db.com/

Also, these pages should become your most thumbed.


http://help.adobe.com/en_US/FlashPlatform/reference/actionscript/3/index.htm


http://help.adobe.com/en_US/flash/cs/using/index.html

http://help.adobe.com/en_US/as3/dev/index.html

HTH

Glen

On 10/03/2011 18:35, Kevin Holleran wrote:

I'll explain further so I get valuable responses and avoid the sarcasm.  My
goal is to pass in the date from the server, the application counts down,
and when the date hits a certain time, the application does something.  This
something that the application does will also be loaded by calling a PHP
script that will load from a backend DB.  My concern is someone being able
to launch the SWF passing in an incorrect date that will trigger this
something early.

Thanks for your help.

Kevin
___
Flashcoders mailing list
Flashcoders@chattyfig.figleaf.com
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders




___
Flashcoders mailing list
Flashcoders@chattyfig.figleaf.com
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders


Re: [Flashcoders] Getting Data into my SWF

2011-03-11 Thread Henrik Andersson

Glen Pike skriver:

Hello,

The parameters that you pass to the SWF in your HTML are different to
communicating with a back-end system.

If you look at URLLoader in actionscript. This enables you to load data
as you would load a web-page.

You would use URLLoader with your server-side code, e.g. PHP to do GET
and POST type requests:

This way, your users cannot inject their own date and it is also
possible to have login type facilities.



You clearly haven't heard of HTTP request sniffers. With something like 
Fiddler http://www.fiddler2.com/ I can easily override the reply from 
any server.


And no, SSL does not help there. I can authorize any certificate 
authority I feel like, including my own one.


And for any other checksum/validation I can always just edit the swf 
file to skip the check.


In the end it is the same ages old trusted client problem. You just 
can't protect code that runs on the client.

___
Flashcoders mailing list
Flashcoders@chattyfig.figleaf.com
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders


Re: [Flashcoders] Getting Data into my SWF

2011-03-11 Thread Glen Pike
Okay, so it is possible to change the date using a sniffer, but being as 
the majority of people don't tend to use sniffers, unless the guy is 
writing a critical application that flies planes or crashes them if the 
date is wrong then I would suggest that the risk assessment here would 
be to accept the fact that there are some people there who might use a 
sniffer and change the date.


if we all ran around with the attitude that you can't trust anyone, so 
what's the point, we would still be in the dark ages.




On 11/03/2011 09:45, Henrik Andersson wrote:

Glen Pike skriver:

Hello,

The parameters that you pass to the SWF in your HTML are different to
communicating with a back-end system.

If you look at URLLoader in actionscript. This enables you to load data
as you would load a web-page.

You would use URLLoader with your server-side code, e.g. PHP to do GET
and POST type requests:

This way, your users cannot inject their own date and it is also
possible to have login type facilities.



You clearly haven't heard of HTTP request sniffers. With something 
like Fiddler http://www.fiddler2.com/ I can easily override the 
reply from any server.


And no, SSL does not help there. I can authorize any certificate 
authority I feel like, including my own one.


And for any other checksum/validation I can always just edit the swf 
file to skip the check.


In the end it is the same ages old trusted client problem. You just 
can't protect code that runs on the client.

___
Flashcoders mailing list
Flashcoders@chattyfig.figleaf.com
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders




___
Flashcoders mailing list
Flashcoders@chattyfig.figleaf.com
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders


RE: [Flashcoders] Getting Data into my SWF

2011-03-11 Thread Merrill, Jason
 Then you need to provide each user with a computer controlled by you and a 
 competent guard
 You clearly haven't heard of

And he's clearly new to this stuff as he said is his original post, so lay off 
 play nice.  There's no reason to respond to people like that. The whole 
reason for these forums is so people can ask questions about things they don't 
know about, and they shouldn't have to feel intimidated.  

 Jason Merrill
 Instructional Technology Architect
 Bank of America  Global Learning 



--
This message w/attachments (message) is intended solely for the use of the 
intended recipient(s) and may contain information that is privileged, 
confidential or proprietary. If you are not an intended recipient, please 
notify the sender, and then please delete and destroy all copies and 
attachments, and be advised that any review or dissemination of, or the taking 
of any action in reliance on, the information contained in or attached to this 
message is prohibited. 
Unless specifically indicated, this message is not an offer to sell or a 
solicitation of any investment products or other financial product or service, 
an official confirmation of any transaction, or an official statement of 
Sender. Subject to applicable law, Sender may intercept, monitor, review and 
retain e-communications (EC) traveling through its networks/systems and may 
produce any such EC to regulators, law enforcement, in litigation and as 
required by law. 
The laws of the country of each sender/recipient may impact the handling of EC, 
and EC may be archived, supervised and produced in countries other than the 
country in which you are located. This message cannot be guaranteed to be 
secure or free of errors or viruses. 

References to Sender are references to any subsidiary of Bank of America 
Corporation. Securities and Insurance Products: * Are Not FDIC Insured * Are 
Not Bank Guaranteed * May Lose Value * Are Not a Bank Deposit * Are Not a 
Condition to Any Banking Service or Activity * Are Not Insured by Any Federal 
Government Agency. Attachments that are part of this EC may have additional 
important disclosures and disclaimers, which you should read. This message is 
subject to terms available at the following link: 
http://www.bankofamerica.com/emaildisclaimer. By messaging with Sender you 
consent to the foregoing.
___
Flashcoders mailing list
Flashcoders@chattyfig.figleaf.com
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders


Re: [Flashcoders] Getting Data into my SWF

2011-03-11 Thread Henrik Andersson

Merrill, Jason skriver:

Then you need to provide each user with a computer controlled by you and a 
competent guard
You clearly haven't heard of


And he's clearly new to this stuff as he said is his original post, so lay off 
 play nice.  There's no reason to respond to people like that. The whole reason for 
these forums is so people can ask questions about things they don't know about, and 
they shouldn't have to feel intimidated.



Point taken. My briefness makes me sound rude. I need to watch my 
wording and remember to include enough facts to support my comments for 
the unexperienced people.


I've stopped counting how many times I've done this kind of mistakes. My 
apologies to everyone involved. Rest assured that no harm was meant. My 
urge to ensure that people on the Internet are right makes me do 
mistakes once in a while.

___
Flashcoders mailing list
Flashcoders@chattyfig.figleaf.com
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders


Re: [Flashcoders] Getting Data into my SWF

2011-03-11 Thread John R. Sweeney Jr
I couldn't agree more.

John


on 3/11/11 9:02 AM, Merrill, Jason at jason.merr...@bankofamerica.com wrote:

 And he's clearly new to this stuff as he said is his original post, so lay off
  play nice.  There's no reason to respond to people like that. The whole
 reason for these forums is so people can ask questions about things they don't
 know about, and they shouldn't have to feel intimidated.


John R. Sweeney Jr.
Interactive Multimedia Developer


OnDemand Interactive Inc
945 Washington Blvd.
Hoffman Estates, IL 60169
Office/Fax: 847.310.5959
Cellular: 847.651.4469
www.ondemandinteractive.com


___
Flashcoders mailing list
Flashcoders@chattyfig.figleaf.com
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders


Re: [Flashcoders] Getting Data into my SWF

2011-03-11 Thread Eric E. Dolecki
Perhaps you could send the string data in some coded way that your Flash
code can decode and use properly. Nothing is going to be fool proof however.
Come up with your own little scheme... a 1 = A, 2 = B, etc. (probably want
something tougher than that though :))

How are you going to handle time zone, etc? Or is this going to be on
computers whose location is known?


  Google Voice: (508) 656-0622
  Twitter: eric_dolecki  XBoxLive: edolecki  PSN: eric_dolecki
  http://blog.ericd.net



On Fri, Mar 11, 2011 at 10:56 AM, John R. Sweeney Jr jr.swee...@comcast.net
 wrote:

 I couldn't agree more.

 John


 on 3/11/11 9:02 AM, Merrill, Jason at jason.merrill@bankofamerica.comwrote:

  And he's clearly new to this stuff as he said is his original post, so
 lay off
   play nice.  There's no reason to respond to people like that. The whole
  reason for these forums is so people can ask questions about things they
 don't
  know about, and they shouldn't have to feel intimidated.


 John R. Sweeney Jr.
 Interactive Multimedia Developer


 OnDemand Interactive Inc
 945 Washington Blvd.
 Hoffman Estates, IL 60169
 Office/Fax: 847.310.5959
 Cellular: 847.651.4469
 www.ondemandinteractive.com


 ___
 Flashcoders mailing list
 Flashcoders@chattyfig.figleaf.com
 http://chattyfig.figleaf.com/mailman/listinfo/flashcoders

___
Flashcoders mailing list
Flashcoders@chattyfig.figleaf.com
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders


Re: [Flashcoders] Getting Data into my SWF

2011-03-11 Thread John McCormack

Kevin,

On start-up the SWF could request the date of data transfer from a 
server script. The script would return it from the database in encrypted 
form to bypass sniffers.


When the date is reached, and data requested, the PHP script could 
compare current server date and date from the database. If different, 
ignore it.


Henrik's phrase You clearly haven't heard of HTTP request sniffers. is 
discouraging. We all make errors, unfortunately.


On the other hand, he comes up with lots of useful information for which 
we are grateful.


John

On 10/03/2011 18:35, Kevin Holleran wrote:

I'll explain further so I get valuable responses and avoid the sarcasm.  My
goal is to pass in the date from the server, the application counts down,
and when the date hits a certain time, the application does something.  This
something that the application does will also be loaded by calling a PHP
script that will load from a backend DB.  My concern is someone being able
to launch the SWF passing in an incorrect date that will trigger this
something early.

Thanks for your help.

Kevin
___
Flashcoders mailing list
Flashcoders@chattyfig.figleaf.com
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders





___
Flashcoders mailing list
Flashcoders@chattyfig.figleaf.com
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders


Re: [Flashcoders] Getting Data into my SWF

2011-03-10 Thread Henrik Andersson

Kevin Holleran skriver:

 I am not
concerned with the user SEEING the data, I just don't want them to be able
to load the SWF in a way that they would be able to pass in their own
values.


Then you need to provide each user with a computer controlled by you and 
a competent guard to prevent the user from tampering with the hardware.

___
Flashcoders mailing list
Flashcoders@chattyfig.figleaf.com
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders


Re: [Flashcoders] Getting Data into my SWF

2011-03-10 Thread Kevin Holleran
I'll explain further so I get valuable responses and avoid the sarcasm.  My
goal is to pass in the date from the server, the application counts down,
and when the date hits a certain time, the application does something.  This
something that the application does will also be loaded by calling a PHP
script that will load from a backend DB.  My concern is someone being able
to launch the SWF passing in an incorrect date that will trigger this
something early.

Thanks for your help.

Kevin
___
Flashcoders mailing list
Flashcoders@chattyfig.figleaf.com
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders