# Flash game with PHP/MySQL - score faking problem

**URL:** <https://forum.kirupa.com/t/flash-game-with-php-mysql-score-faking-problem/165315>\
**Category:** flash\
**Created:** [October 10, 2005, 10:06am UTC](https://forum.kirupa.com/t/flash-game-with-php-mysql-score-faking-problem/165315 "2005-10-10T10:06:01Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![Danko](https://avatars.discourse-cdn.com/v4/letter/d/58956e/32.png) [@Danko](https://forum.kirupa.com/u/Danko)\
**Post date:** [October 10, 2005, 10:06am UTC](https://forum.kirupa.com/t/flash-game-with-php-mysql-score-faking-problem/165315/1 "2005-10-10T10:06:01Z")

</div>

I’d like to have a score table for a Flash game and keep it in a database (using \*\*loadVars \*\* method).

The problem is: how to prevent the **score faking**?

In normal situation, when the game is over - the score table is called from within Flash and a new score is written in it.

But, there are people who will want to make e.g. one million points without playing a game! 🙂 They will decompile a .swf, see what loadVars does, and write a score from their custom .php form.

How to prevent it?  
Normal authentication isn’t suitable here, because the game is open to everybody.