Flashblocks Flash CMS Component
(Flash Content Management System)

Hi, I have a question regarding the AMFPHP remoting function.

If a SQL select sentence is stored in flash, would it not create a security hole? I'm thinking it would be possible to download the swf file, decompile it and alter the sql sentences?

Just downloaded the 1.4 upgrade, looking forward to trying it out. When will a tutorial on mysql be available?

Thanks for a great product by the way!

Best regards,
Kjetil Horneland
www.gemdesign.no

I have been wondering a similar thing, if someone could step between the flash movie and the server and rewrite the MySQL code being sent to the mySQL execution script. It would probably be better to have all the mySQL commands that you needed hard coded into individual scripts/commands to be called through AMFPHP. That way it is less likely that someone could erase your database.

I need to do more testing and research before I support the new functionality.

By the way, AMFPHP 1.0 milestone 1 released.
http://www.5etdemi.com/blog/archives/2005/06/amfphp-10-milestone-1-released/
I will be integrating the latest builds into flashblocks.

Thanks for the note.