# Protecting game points database

**URL:** <https://forum.kirupa.com/t/protecting-game-points-database/66737>\
**Category:** programming\
**Created:** [October 8, 2004, 12:32pm UTC](https://forum.kirupa.com/t/protecting-game-points-database/66737 "2004-10-08T12:32:51Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![dns](https://avatars.discourse-cdn.com/v4/letter/d/58f4c7/32.png) [@dns](https://forum.kirupa.com/u/dns)\
**Post date:** [October 8, 2004, 12:32pm UTC](https://forum.kirupa.com/t/protecting-game-points-database/66737/1 "2004-10-08T12:32:51Z")

</div>

Hellow all

I made a flash game that save hi-scores using ASP querystring. The problem is that anyone who decompile my swf can find the url and pass values to it.

So I found out that I should verify where the browser sent a request from. I could do that using ASP’s http\_referrer command. Works nice, but when I tried a request from the flash game, the server lost the referrer (and it’s the same if you just typed a url in the address bar).

I thought about getting the browser’s url using javascript, shared.obj, but once you decompile the swf you can fake any variables… so I still think the best option is to use a server side script.

But well, does anyone have an idea? :ear:

:h: I hope I made myself clear as well…  
cheers