[FMX][PHP] How to deny access if a PHP script is not called from a particular flash?

HI

I am loading some variables form database.

The PHP will echo data in the manner which flash understands.

My flash file will use those values and display them.

Now it is absolutely [font=Verdana][size=2][color=black][font=Times New Roman][font=Verdana][size=2]necessary[/size][/font] [/font][/color]that the PHP file denies access if it is called from any where else.[/size][/font]

I think some REFERER can be used but i am not sure.

If this is not the appropriate form please guide me.

Regards

amitgeorge

how about just passing in some extra post data that only the flash file knows. Then you can check for that in the PHP and only do what you need to do if it exists

Thanks for the reply senocular

But wouldnt a hacker be able to view the posted variables and then …

hacker this, hacker that, what are you going to do?
Sending data through the swf is no different than if it was sent through the browser.

$_SERVER[“HTTP_REFERER”] can be checked which will let you know if someone is coming offsite, but you cant tell what Flash movie is calling the page… not unless you post some additional data through it.

there’s no way to implement what you’re asking for 100% securely. Using HTTP_REFERER will deter the amateur, but that’s easily faked from telnet or wherever.