*so.addVariable* is from SWFObject 1.x, which is no longer supported.

Regardless, anytime you add variables to the FlashVars, you're essentially
building a querystring. Querystrings by nature are public, so anyone can see
them. The best you can do is encrypt the values using some sort of
cryptography mechanism, starting with a simple Base64 encoding and going up
to SHA-1 or MD5 type of encoding (Mike Chambers started a great ActionScript
library <https://github.com/mikechambers/as3corelib> for this). But your
encryption will need to happen via a server-side script before the page is
rendered; if you use JavaScript to encrypt, your variables will be publicly
accessible.

Also bear in mind that if your SWF is equipped to decrypt the variables,
someone can use a SWF decompiler to examine how your SWF decrypts the vars,
potentially rendering your work pointless.

- philip



On Tue, Nov 16, 2010 at 12:36 PM, Jay Jennings <[email protected]>wrote:

> Is it possible to Encrypt your so.addVariable 's? If so what is the
> recommended way of doing so.
>
> Or would it be possible to pass a list of so.addVariables in as an
> encrypted xml file?
>
> Thanks!
>
> --
> You received this message because you are subscribed to the Google Groups
> "SWFObject" group.
> To post to this group, send email to [email protected].
> To unsubscribe from this group, send email to
> [email protected]<swfobject%[email protected]>
> .
> For more options, visit this group at
> http://groups.google.com/group/swfobject?hl=en.
>
>

-- 
You received this message because you are subscribed to the Google Groups 
"SWFObject" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/swfobject?hl=en.

Reply via email to