RE: [Flashcoders] Flash SQL

2006-07-15 Thread neo binedell
Well you can change it right there in the browser by
calling methods on the movie object and setting variables.

It is important to keep anything like that on the server
side, as you can see with a lot of online flash games
with high incredible hiscores, etc.

I did this a couple of times to test security on sub-contractors
code for clients and it was quite embarrassing for them, not
to mention a potential security and PR disaster that can sink
a company if it is a non-trivial environment.

The best way is to have a well defined server api and let the 
flash client speak to that using xml, etc. The api can implement
role based security and catch any attempts to subvert it by 
checking against known state or whatever.

An easy example would be having different asp pages (or one that
processes all commands) that accept query strings (or xml) and
return xml.

e.g.

instead of having select * from clients in your flash code,
you would call getClientList.asp?blah=blahetc which would
check that the (authenticated)client had permissions to get
a client list and then generate and return the xml from 
sql statements.

Hope that helps
~neo


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of mike cann
Sent: 13 July 2006 12:45 PM
To: Flashcoders mailing list
Subject: Re: [Flashcoders] Flash SQL

this doesnt sound like a good idea as anyone can download your .swf and
decompile it then change that SELECT * statement to a DROP statement with
ease.

On 12/07/06, Jose Maria Barros [EMAIL PROTECTED] wrote:

 Now im working on a project that involves SQL Server, ASP , XML and 
 flash..and i think its so difficult to work with this for me..
 Maybe tthis component whill help..but not much..

 Im not a good coder..so maybe this help

 On 7/12/06, jcarlos [EMAIL PROTECTED] wrote:
 
  it seems to be interesting
 
  But I didn´t see any Stored Procedure based example
 
  Isn´t  this SQL open way of dB query not very recommended since it
 exposes
  your persistence logic, tables and so on ???
 
  I´m not an n-layers app expert but I found this arguments very often
 
 
  João Carlos
 
  - Original Message -
  From: Tunç Atakan [EMAIL PROTECTED]
  To: 'Flashcoders mailing list' flashcoders@chattyfig.figleaf.com
  Sent: Wednesday, July 12, 2006 9:39 AM
  Subject: RE: [Flashcoders] Flash SQL
 
 
   http://www.netdrims.com/flashsql/
  
  
   Anybody use this component?
  
   I need comment?
  
   Thanx...
  
   Tunc
  
  
  
   ___
   Flashcoders@chattyfig.figleaf.com
   To change your subscription options or search the archive:
   http://chattyfig.figleaf.com/mailman/listinfo/flashcoders
  
   Brought to you by Fig Leaf Software Premier Authorized Adobe 
   Consulting and Training http://www.figleaf.com 
   http://training.figleaf.com
 
  ___
  Flashcoders@chattyfig.figleaf.com
  To change your subscription options or search the archive:
  http://chattyfig.figleaf.com/mailman/listinfo/flashcoders
 
  Brought to you by Fig Leaf Software
  Premier Authorized Adobe Consulting and Training 
  http://www.figleaf.com http://training.figleaf.com
 
 ___
 Flashcoders@chattyfig.figleaf.com
 To change your subscription options or search the archive:
 http://chattyfig.figleaf.com/mailman/listinfo/flashcoders

 Brought to you by Fig Leaf Software
 Premier Authorized Adobe Consulting and Training 
 http://www.figleaf.com http://training.figleaf.com

___
Flashcoders@chattyfig.figleaf.com
To change your subscription options or search the archive:
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders

Brought to you by Fig Leaf Software
Premier Authorized Adobe Consulting and Training http://www.figleaf.com
http://training.figleaf.com

___
Flashcoders@chattyfig.figleaf.com
To change your subscription options or search the archive:
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders

Brought to you by Fig Leaf Software
Premier Authorized Adobe Consulting and Training
http://www.figleaf.com
http://training.figleaf.com


Re: [Flashcoders] Flash SQL

2006-07-14 Thread mike cann

this doesnt sound like a good idea as anyone can download your .swf and
decompile it then change that SELECT * statement to a DROP statement with
ease.

On 12/07/06, Jose Maria Barros [EMAIL PROTECTED] wrote:


Now im working on a project that involves SQL Server, ASP , XML and
flash..and i think its so difficult to work with this for me..
Maybe tthis component whill help..but not much..

Im not a good coder..so maybe this help

On 7/12/06, jcarlos [EMAIL PROTECTED] wrote:

 it seems to be interesting

 But I didn´t see any Stored Procedure based example

 Isn´t  this SQL open way of dB query not very recommended since it
exposes
 your persistence logic, tables and so on ???

 I´m not an n-layers app expert but I found this arguments very often


 João Carlos

 - Original Message -
 From: Tunç Atakan [EMAIL PROTECTED]
 To: 'Flashcoders mailing list' flashcoders@chattyfig.figleaf.com
 Sent: Wednesday, July 12, 2006 9:39 AM
 Subject: RE: [Flashcoders] Flash SQL


  http://www.netdrims.com/flashsql/
 
 
  Anybody use this component?
 
  I need comment?
 
  Thanx...
 
  Tunc
 
 
 
  ___
  Flashcoders@chattyfig.figleaf.com
  To change your subscription options or search the archive:
  http://chattyfig.figleaf.com/mailman/listinfo/flashcoders
 
  Brought to you by Fig Leaf Software
  Premier Authorized Adobe Consulting and Training
  http://www.figleaf.com
  http://training.figleaf.com

 ___
 Flashcoders@chattyfig.figleaf.com
 To change your subscription options or search the archive:
 http://chattyfig.figleaf.com/mailman/listinfo/flashcoders

 Brought to you by Fig Leaf Software
 Premier Authorized Adobe Consulting and Training
 http://www.figleaf.com
 http://training.figleaf.com

___
Flashcoders@chattyfig.figleaf.com
To change your subscription options or search the archive:
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders

Brought to you by Fig Leaf Software
Premier Authorized Adobe Consulting and Training
http://www.figleaf.com
http://training.figleaf.com


___
Flashcoders@chattyfig.figleaf.com
To change your subscription options or search the archive:
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders

Brought to you by Fig Leaf Software
Premier Authorized Adobe Consulting and Training
http://www.figleaf.com
http://training.figleaf.com


RE: [Flashcoders] Flash SQL

2006-07-12 Thread Tunç Atakan
http://www.netdrims.com/flashsql/


Anybody use this component?

I need comment?

Thanx...

Tunc 



___
Flashcoders@chattyfig.figleaf.com
To change your subscription options or search the archive:
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders

Brought to you by Fig Leaf Software
Premier Authorized Adobe Consulting and Training
http://www.figleaf.com
http://training.figleaf.com


Re: [Flashcoders] Flash SQL

2006-07-12 Thread jcarlos

it seems to be interesting

But I didn´t see any Stored Procedure based example

Isn´t  this SQL open way of dB query not very recommended since it exposes 
your persistence logic, tables and so on ???


I´m not an n-layers app expert but I found this arguments very often 

João Carlos

- Original Message - 
From: Tunç Atakan [EMAIL PROTECTED]

To: 'Flashcoders mailing list' flashcoders@chattyfig.figleaf.com
Sent: Wednesday, July 12, 2006 9:39 AM
Subject: RE: [Flashcoders] Flash SQL



http://www.netdrims.com/flashsql/


Anybody use this component?

I need comment?

Thanx...

Tunc



___
Flashcoders@chattyfig.figleaf.com
To change your subscription options or search the archive:
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders

Brought to you by Fig Leaf Software
Premier Authorized Adobe Consulting and Training
http://www.figleaf.com
http://training.figleaf.com 


___
Flashcoders@chattyfig.figleaf.com
To change your subscription options or search the archive:
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders

Brought to you by Fig Leaf Software
Premier Authorized Adobe Consulting and Training
http://www.figleaf.com
http://training.figleaf.com


Re: [Flashcoders] Flash SQL

2006-07-12 Thread Jose Maria Barros

Now im working on a project that involves SQL Server, ASP , XML and
flash..and i think its so difficult to work with this for me..
Maybe tthis component whill help..but not much..

Im not a good coder..so maybe this help

On 7/12/06, jcarlos [EMAIL PROTECTED] wrote:


it seems to be interesting

But I didn´t see any Stored Procedure based example

Isn´t  this SQL open way of dB query not very recommended since it exposes
your persistence logic, tables and so on ???

I´m not an n-layers app expert but I found this arguments very often 

João Carlos

- Original Message -
From: Tunç Atakan [EMAIL PROTECTED]
To: 'Flashcoders mailing list' flashcoders@chattyfig.figleaf.com
Sent: Wednesday, July 12, 2006 9:39 AM
Subject: RE: [Flashcoders] Flash SQL


 http://www.netdrims.com/flashsql/


 Anybody use this component?

 I need comment?

 Thanx...

 Tunc



 ___
 Flashcoders@chattyfig.figleaf.com
 To change your subscription options or search the archive:
 http://chattyfig.figleaf.com/mailman/listinfo/flashcoders

 Brought to you by Fig Leaf Software
 Premier Authorized Adobe Consulting and Training
 http://www.figleaf.com
 http://training.figleaf.com

___
Flashcoders@chattyfig.figleaf.com
To change your subscription options or search the archive:
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders

Brought to you by Fig Leaf Software
Premier Authorized Adobe Consulting and Training
http://www.figleaf.com
http://training.figleaf.com


___
Flashcoders@chattyfig.figleaf.com
To change your subscription options or search the archive:
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders

Brought to you by Fig Leaf Software
Premier Authorized Adobe Consulting and Training
http://www.figleaf.com
http://training.figleaf.com