What he said.  :)

Vincent

On Tue, Nov 16, 2010 at 12:57 PM, Philip Hutchison <[email protected]>wrote:

> *so.addVariable* is from SWFObject 1.x, which is no longer supported.
>
> Regardless, anytime you add variables to the FlashVars, you're essentially
> building a querystring. Querystrings by nature are public, so anyone can see
> them. The best you can do is encrypt the values using some sort of
> cryptography mechanism, starting with a simple Base64 encoding and going up
> to SHA-1 or MD5 type of encoding (Mike Chambers started a great
> ActionScript library <https://github.com/mikechambers/as3corelib> for
> this). But your encryption will need to happen via a server-side script
> before the page is rendered; if you use JavaScript to encrypt, your
> variables will be publicly accessible.
>
> Also bear in mind that if your SWF is equipped to decrypt the variables,
> someone can use a SWF decompiler to examine how your SWF decrypts the vars,
> potentially rendering your work pointless.
>
> - philip
>
>
>
> On Tue, Nov 16, 2010 at 12:36 PM, Jay Jennings <[email protected]>wrote:
>
>> Is it possible to Encrypt your so.addVariable 's? If so what is the
>> recommended way of doing so.
>>
>> Or would it be possible to pass a list of so.addVariables in as an
>> encrypted xml file?
>>
>> Thanks!
>>
>> --
>> You received this message because you are subscribed to the Google Groups
>> "SWFObject" group.
>> To post to this group, send email to [email protected].
>> To unsubscribe from this group, send email to
>> [email protected]<swfobject%[email protected]>
>> .
>> For more options, visit this group at
>> http://groups.google.com/group/swfobject?hl=en.
>>
>>
>  --
> You received this message because you are subscribed to the Google Groups
> "SWFObject" group.
> To post to this group, send email to [email protected].
> To unsubscribe from this group, send email to
> [email protected]<swfobject%[email protected]>
> .
> For more options, visit this group at
> http://groups.google.com/group/swfobject?hl=en.
>

-- 
You received this message because you are subscribed to the Google Groups 
"SWFObject" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/swfobject?hl=en.

Reply via email to