Re: [Flashcoders] Flash Game - Post Encrypted Score to server side script

2006-12-24 Thread JOR

Referrer's can be faked.
James



Mick G wrote:

You can also try checking the HTTP referrer in PHP to make sure people
can only post data to your PHP script from your page on your site.


___
Flashcoders@chattyfig.figleaf.com
To change your subscription options or search the archive:
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders

Brought to you by Fig Leaf Software
Premier Authorized Adobe Consulting and Training
http://www.figleaf.com
http://training.figleaf.com


Re: [Flashcoders] Flash Game - Post Encrypted Score to server side script

2006-12-24 Thread JulianG

I was starting to suspect that. Thank you!

JOR wrote:

Referrer's can be faked.
James



Mick G wrote:

You can also try checking the HTTP referrer in PHP to make sure people
can only post data to your PHP script from your page on your site.


___
Flashcoders@chattyfig.figleaf.com
To change your subscription options or search the archive:
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders

Brought to you by Fig Leaf Software
Premier Authorized Adobe Consulting and Training
http://www.figleaf.com
http://training.figleaf.com


[Flashcoders] Flash Game - Post Encrypted Score to server side script

2006-12-22 Thread JulianG

Hello:

I'm developing a small flash game for a website.
Users must register and log-in before they're allowed to post their 
scores to the back-end.
Nevertheless I don't want to have the scores posted in a simple way, 
because someone could easily, sign up, log-in, and then post a higher 
score without even playing the game.


My idea is to encrypt the score using some algorithm in ActionScript, 
something that I can reproduce in PHP on the server side.
I don't want them to be able to read an encrypted score and then try 
similar strings in order to get a higher score by chance. I think the 
encrypted string should have a check digit or character or something so 
it auto-validates.


Do you know of anywhere I could start reading?
or perhaps get an encryption algorithm that I can use?

Thanks,
JuliánG


___
Flashcoders@chattyfig.figleaf.com
To change your subscription options or search the archive:
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders

Brought to you by Fig Leaf Software
Premier Authorized Adobe Consulting and Training
http://www.figleaf.com
http://training.figleaf.com


Re: [Flashcoders] Flash Game - Post Encrypted Score to server side script

2006-12-22 Thread john

Quoting JulianG [EMAIL PROTECTED]:


Hello:

I'm developing a small flash game for a website.
Users must register and log-in before they're allowed to post their
scores to the back-end.
Nevertheless I don't want to have the scores posted in a simple way,
because someone could easily, sign up, log-in, and then post a higher
score without even playing the game.

My idea is to encrypt the score using some algorithm in ActionScript,
something that I can reproduce in PHP on the server side.
I don't want them to be able to read an encrypted score and then try
similar strings in order to get a higher score by chance. I think the
encrypted string should have a check digit or character or something so
it auto-validates.

Do you know of anywhere I could start reading?
or perhaps get an encryption algorithm that I can use?


I use MD5 on my stuff at www.thecodezone.com (which sounds similar to  
what you're trying to do, give it a try). MD5 is built into PHP, so  
that's easy. A quick google-search will find you a couple of  
Actionscript and/or Javascript implementations.


___
Flashcoders@chattyfig.figleaf.com
To change your subscription options or search the archive:
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders

Brought to you by Fig Leaf Software
Premier Authorized Adobe Consulting and Training
http://www.figleaf.com
http://training.figleaf.com


Re: [Flashcoders] Flash Game - Post Encrypted Score to server side script

2006-12-22 Thread JulianG

Thanks John!



___
Flashcoders@chattyfig.figleaf.com
To change your subscription options or search the archive:
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders

Brought to you by Fig Leaf Software
Premier Authorized Adobe Consulting and Training
http://www.figleaf.com
http://training.figleaf.com


Re: [Flashcoders] Flash Game - Post Encrypted Score to server side script

2006-12-22 Thread Mick G

You can also try checking the HTTP referrer in PHP to make sure people
can only post data to your PHP script from your page on your site.


On 12/22/06, JulianG [EMAIL PROTECTED] wrote:

Thanks John!

___
Flashcoders@chattyfig.figleaf.com
To change your subscription options or search the archive:
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders

Brought to you by Fig Leaf Software
Premier Authorized Adobe Consulting and Training
http://www.figleaf.com
http://training.figleaf.com


___
Flashcoders@chattyfig.figleaf.com
To change your subscription options or search the archive:
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders

Brought to you by Fig Leaf Software
Premier Authorized Adobe Consulting and Training
http://www.figleaf.com
http://training.figleaf.com