RE: [Flashcoders] Encrypting data
Yes it is, but you could create a kind of "checksum", for example take the highscore and append the senders IP and then hash this string, and check if the server´s hash results in the same checksum. Kind of a shared secret technique -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dave Mennenoh Sent: Wednesday, March 15, 2006 5:57 AM To: Flashcoders mailing list Subject: Re: [Flashcoders] Encrypting data MD5 isn't going to help encrypting a high score is it? It's a one way hash... Dave - Adobe Community Expert www.blurredistinction.com www.macromedia.com/support/forums/team_macromedia/ ___ Flashcoders@chattyfig.figleaf.com To change your subscription options or search the archive: http://chattyfig.figleaf.com/mailman/listinfo/flashcoders Brought to you by Fig Leaf Software Premier Authorized Adobe Consulting and Training http://www.figleaf.com http://training.figleaf.com ___ Flashcoders@chattyfig.figleaf.com To change your subscription options or search the archive: http://chattyfig.figleaf.com/mailman/listinfo/flashcoders Brought to you by Fig Leaf Software Premier Authorized Adobe Consulting and Training http://www.figleaf.com http://training.figleaf.com
Re: [Flashcoders] Encrypting data
This is true. However, if someone is prepared to submit fake post requests to hack your high scores, are they not going to decompile your SWF to see how you encrypt the high scores? My recommendation is to submit the level reached and the score, and have the server validate these (ie that the score achieved was possible for the level reached). Also, make the client inform the server every time a new level is reached, and validate that these are not occuring too fast (ie at least 20 seconds apart). And encrypt any important data sent to/from the server, but use some stupid algorithm you made up, do it inline (don't use a encrypt/decrypt function), and then obfuscate your actionscript. Oh, and if any of these server side checks fail, just ignore any high scores from that IP address. Or, just admit that faking high scores is nigh impossible when the client is so easily modified, and don't worry about it :) Regards, Grant Cox Dave Mennenoh wrote: MD5 isn't going to help encrypting a high score is it? It's a one way hash... Dave - Adobe Community Expert www.blurredistinction.com www.macromedia.com/support/forums/team_macromedia/ ___ Flashcoders@chattyfig.figleaf.com To change your subscription options or search the archive: http://chattyfig.figleaf.com/mailman/listinfo/flashcoders Brought to you by Fig Leaf Software Premier Authorized Adobe Consulting and Training http://www.figleaf.com http://training.figleaf.com ___ Flashcoders@chattyfig.figleaf.com To change your subscription options or search the archive: http://chattyfig.figleaf.com/mailman/listinfo/flashcoders Brought to you by Fig Leaf Software Premier Authorized Adobe Consulting and Training http://www.figleaf.com http://training.figleaf.com
Re: [Flashcoders] Encrypting data
Are you trying to do this with getURL?? this is what do you mean or I'm missing something? I did it for my game at inbyted.com and I did it with amfphp and in the live HTTP headers you just see the connection to the gateway. I think it's pretty transparent... regards... GaB www.inbyted.com On 3/15/06, Dave Mennenoh <[EMAIL PROTECTED]> wrote: > > MD5 isn't going to help encrypting a high score is it? It's a one way > hash... > > > Dave - > Adobe Community Expert > www.blurredistinction.com > www.macromedia.com/support/forums/team_macromedia/ > > > ___ > Flashcoders@chattyfig.figleaf.com > To change your subscription options or search the archive: > http://chattyfig.figleaf.com/mailman/listinfo/flashcoders > > Brought to you by Fig Leaf Software > Premier Authorized Adobe Consulting and Training > http://www.figleaf.com > http://training.figleaf.com > ___ Flashcoders@chattyfig.figleaf.com To change your subscription options or search the archive: http://chattyfig.figleaf.com/mailman/listinfo/flashcoders Brought to you by Fig Leaf Software Premier Authorized Adobe Consulting and Training http://www.figleaf.com http://training.figleaf.com
Re: [Flashcoders] Encrypting data
MD5 isn't going to help encrypting a high score is it? It's a one way hash... Dave - Adobe Community Expert www.blurredistinction.com www.macromedia.com/support/forums/team_macromedia/ ___ Flashcoders@chattyfig.figleaf.com To change your subscription options or search the archive: http://chattyfig.figleaf.com/mailman/listinfo/flashcoders Brought to you by Fig Leaf Software Premier Authorized Adobe Consulting and Training http://www.figleaf.com http://training.figleaf.com
RE: [Flashcoders] Encrypting data
Check out the md5 encryption for Flash at http://www.meychi.com/archive/31.php -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jiri Heitlager Sent: Tuesday, March 14, 2006 1:25 PM To: flashcoders@chattyfig.figleaf.com Subject: [Flashcoders] Encrypting data Hello, I am currently making a game that sends the highscore to a php file that puts it into a database. If I would just send the var score to a php file, then it will be quit easy to manipulate the score. Using the firefox plugin Live HTTP Headers it is easy to see what is being send from the flash movie, knowing the URL you could then set the data using that URL. Does somebody know a way to encrypt the score in flash and then decrypt it in php? Thnks. ___ Flashcoders@chattyfig.figleaf.com To change your subscription options or search the archive: http://chattyfig.figleaf.com/mailman/listinfo/flashcoders Brought to you by Fig Leaf Software Premier Authorized Adobe Consulting and Training http://www.figleaf.com http://training.figleaf.com ___ Flashcoders@chattyfig.figleaf.com To change your subscription options or search the archive: http://chattyfig.figleaf.com/mailman/listinfo/flashcoders Brought to you by Fig Leaf Software Premier Authorized Adobe Consulting and Training http://www.figleaf.com http://training.figleaf.com
