Uploader Comments (flashbuilding)
Top Comments
-
For people who will use that example as a template for a page:
1. THERE IS SQL INJECTION HOLE: in PHP username and pasword are not validated.
2. YOU CAN CHANGE CONTENT WHITEOUT BEING ADMIN: in PHP there is no check if user logged in or not then updating/modifying content
Video Responses
All Comments (86)
-
The example only shows communication between Flash -> PHP -> MySQL.
If you want to add more security - go ahead ;).
Do this for the beginning: Send from Flash to PHP data, from PHP check MySQL for existing usernames (or whatever you want to check), return true or false from MySQL to PHP. If username exist in SQL database, then register the encrypted session. THIS IS ONLY THE BEGINNING! Greetings for Develop PHP!
-
Hi I'm having trubble with this tutorial. I have been creating a site with this. And I have 8 textboxes that can be edited instead of 2 as in the tutorial. 6 of them work but 2 of them won't, even if I have exactly the same code on all of it.
any ideas?
-
where is the exact link for this?
-
this is some good ideas brah! u are leet.
-
@flashbuilding i am going to lol just because ... LOL
-
how different is actionscript 3.0 from actionscript 2.0?
-
@flashbuilding Then where did Viruses come from? I wonder...
-
you said you don't need security these days humans are good an honest i bet that someone had the chance he wood hack your thing in a fraction of a second
-
Awesome niceone



You realize your whole setup is open for injections? What if I decompile the swf and get my hands on the name of the PHP backend and post in whatever I like? You have to sanitize the data and add session control.
f1nsken 2 years ago
Yes... but we don't need security in today's web. Humans are good and honest.
flashbuilding 2 years ago 33