loadVariables only from my server

programming flash
1

Hi guys,

Im developing a game. In some parts, i need to save some info on database (like experience, money, level, …).

But i cant let people inject code on the server side script (php).

If i send the variables via post, the injector may create a form and send too =(

In php, i’ve tried to get the referer from where the data came from… without success, from flash, the referer comes null =(

If i make SESSIONs, the injector may enter on the game, after that, he goes to the form to inject the data, the session will not be erased =(

Any idea?

Thanks in advance

2

If the form is never mentioned (ie the_form.php) inside flash - how will an “injector” be able to mimic a form call? (Not to mention without knowing what the form variables are)

3

As long as the PHP page is not displaying the information. If it’s just pulling into flash, your pretty secure. Unless you use a decompressor.

4

Yeah… the ■■■■ decompilers =/

With these tools, the injector will know the file name