Célio
Visitor
|
Re:security, cheating issues - 2006/08/15 21:32
Hi !
There are two security / cheating issues
First you should never use palabre to send important informations like credit cards number, ... it's like HTTP not like HTTPS it's not secure
But as torleif said, the private messages are not seen by other users, but could be seen through packet sniffers ...
The other security issue is that you CAN'T trust datas sent by the flash clients, because you can't be sure that it's the flash client you created that is sending them.
It could be another one, or a modified one ... this really complicate the problem when you want to store secure highscores, ...
There are no magic solutions to this.
One prety good (but complex) solution is to generate the swf file on the fly (via php ming library for example, ....) with a single code, and to request the client to send this code as soon as it's loaded (each code usable only once for let's say one minute)
There are workarounds but involving on the fly SWF decompilation > interpretation > recompilation > execution
which is a little bit harder to do ...
Have fun
|
Palabre on Facebook
DOWNLOAD
FORUM
FAQ
WHAT IS IT
