What a dork
Posts: 16
116 credits Members referred : 1
« Reply #2 on: Jul 03, 2006, 05:01:15 pm »
This server var returns "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)". There is another server var HTTP_X_FLASH_VERSION which return the version of flash player "8,0,22,0". But if i develop a application with a browser object i will send this var to php script. So this script isn't secure.
I am a metal monkey!
Administrator Community Supporter?
Jedai Sword Master
Gender:
Posts: 5799
46391 credits Members referred : 3
« Reply #3 on: Jul 03, 2006, 05:05:16 pm »
Yeah that's true.
Then there is nothing that you can really do except some checks with the session(but this can give you other troubles).
but Nick is right, since every flash movie is a local application you can't do very much. I saw application using xml/soap requests for "safe" interacting and I saw somewhere a md5 javascript encryption (but missed the URL). The last one could be the magic...
I am a metal monkey!
Administrator Community Supporter?
Jedai Sword Master
Gender:
Posts: 5799
46391 credits Members referred : 3
« Reply #5 on: Jul 04, 2006, 10:31:30 am »
For the md5 javascript code you can check a vbulletin forum (eg. gibberishtalk.com)