[Defyer]

Are flash based logins a secure way to protect information or is it easily bypassed and such?

[UnrealEd]

depends on how you store the users login.
- if your storing the login info in your flash application , i guess it's safe, unless your storing all user info in your swf, cause they are easily decompiled.
- if you're sending your login info to a server-sided script that checks the login, and stores all user inof, it is certainly safe. you can use sendandload stuff for this, of you could setup a socket

greetz,
UnrealEd

[Defyer]

I only know how to store them in the .swf file, how would I go about using a server side script, does it take awhile to code or is it just type the user name then type the password?

[UnrealEd]

basicly you setup a username-input field, and password field.
and then you write for example a php file with the following code:

PHP Code:

<?php

$username = $_POST["username"];

$password = $_POST["password"];

if(!empty($username) && !empty($password)):

  //if you wonna check in a database system:

  $res = mysql_query("SELECT FROM user_table WHERE username='".$username."' AND password='".$password."'");

  if(mysql_num_rows($res) == 1):

    echo "login=true";

  else:

    echo "login=invalid_info";

  endif;



else:

  echo "login=no_input";

endif;

?>

in your flash you'll have to place this code:

Code:

dt = new LoadVars();
dt.username = username_textfield.text;
dt.password = password_textfield.text;
dt.sendAndLoad("http://www.yourwebsite.com/login.php", dt);
dt.onLoad = function(){
  if(this.login == "true"){
    //do login stuff
  else if(this.login == "no_input"){
    trace("you didn't specify any username and/or password");
  else if(this.login == "invalid_info"){
    trace("the inserted username and/or password were incorrect");
  }
};

this should work, and i hope it helps a little. if you need more info on login systems in php, search in for posts in the php-mysql area

Greetz,
UnrealEd

[Pissedoff]

I prefer Perl to Php, but when you decompile a swf file, does it come back with all the actionscript in readable form?

[UnrealEd]

depends on what compiler you use, i guess.

i have 1 that displays the AS that is written in the frames itself, but not the external classes

Greetz,
UnrealEd