Xml security

1

i have a flash movie that uses an xml file.

i see that if i type in the url to the xml file in my browser that is shows its entire contents.

how do i prevent this?

2

You can’t. Whats in the file that would create a security risk? And if it does mabey you should find a .php solution…

xmlfile.php?r=[constant random number here]

encrypt your .swf.

if($_get['r'] == [constant random number here]){
print('xml mark up here');
}

You may have to change the header so its seen as a .xml file, but i dont know.

3

You can try storing the xml file above the web directory.

4

Hi. This is possible to deny other users to access your files on the server. Please take a look at this, taken from http://www.edginet.org/techie/website/htaccess.html :
---------------------- ** **

If you want to prevent people from viewing or downloading any files in a particular directory you can just place a .htaccess file like this in that directory.

prevent reading of all files

<Files *>
Deny From All
</Files>
For example, I have a directory which holds include files containing various passwords and web-service keys that I don’t want anybody to be able to see. Ideally this would be stored outside the directory tree that the web-server can serve-up, but on some configurations that is not possible. In this case the .htaccess file above prevents anyone from viewing the files whilst still allowing them to be included in PHP scripts.
You can be more selective about what you allow people to see. This .htaccess file will prevent people from seeing just the files with the .inc suffix. Anything else is accessible.

prevent reading of .inc files

<Files *.inc>
Deny From All
</Files>

Good Luck !!! =)

5

If i understood you correctly.

1.Put an idex file
2.Use htpasword
3. Dotn store secert information :smiley:

6

This way flash can’t access the file either. Please remember that flash is a client side application.

7

Yeah I was thinking the same thing.

Just brainstorming here - but how to people keep their data private?

Would writing a php script to parse and retrieve the xml data be the best way?

If anyone has any examples - I’d love to see them.