Preventing remote url file reads in Flash

We have a Flash application provided by a vendor. It reads its parameters from an xml file on our web server's file system. However, it can also be spoofed to read its parameters from an xml file sitting on another domain's web server. At first we thought crossdomain.xml might be able to fix this, but we've researched it and understand the purpose of crossdomain.xml. It won't solve this issue.
Are there any ways of enforcing that a Flash application reads its input file only from the same server where the Flash application was served? Or is the recommendation just to initialize variables within the Flash app, not relying on an external file.
Thanks for your help with this.

Yes, the idea is that someone would force my swf to read an off-site xml input file, which would initialize some variables in my file. It was a defect detected by Whitehat, so I'm pretty sure it's plausible.

Similar Messages

Prevent the browser to read cached Flash object

I have a slideshow Flash object which pics filename are
supplied by an .XML
file created dinamically every time the page loads.
Unfortunately the .SWF is always being read from cache even
though the .XML is changed
correctly. The Flash movie always shows the pictures loaded
at start of the application.
I am able to refresh the Flash movie if:
- I restart the application;
- I set the browser setting to check for newer version of
stored pages to "every time";
- after 5/10 minutes have elapsed from the last reloading
(couldn't find a real pattern here);
To prevent caching I have tried the following:
- Added a random number at the and of the URL that calls the
page (...&r=#rundomNumber()#)
- Added <META HTTP-EQUIV="Expires" CONTENT="Mon, 04 Dec
1999 21:29:02 GMT">
- Added <META HTTP-EQUIV="Pragma" CONTENT="no-cache">
- Added <META HTTP-EQUIV="Cache-Control"
CONTENT="no-cache">
in various combinations.
- Used <cfheader name="Expires"
value="#GetHttpTimeString(Now())#">
- Modified the param name="movie" to
<param name="movie"
value="Gallery.swf?id=#randomNumber()#" />
or to
<param name="movie"
value="Gallery.swf?id=#randomNumber()#&xmlPath=gallery.xml&id=#randomNumber()#"
/>
also
Opening the Gallery.fla with Flash 2004 in the Component
Inspector, parameter xml Path = gallery.xml changed to
"gallery.xml?id=1"
or
"gallery.xm?Math.round(Math.random() * 99999
all this to prevent the browser to read from cache and
download a fresh copy from the server, but to no avail.
Is there something else to be tried?
Thank you for helping.
ContiW

Click in your page where you want the SWF to go, then select
Insert > Media > Flash from the menu (or maybe Insert >
Flash ... DWMX goes back a way).
Charles Nadeau
Dreamweaver
Adobe Systems

Play mp3 from remote url

Hi Everyone,
I am Completely new to Flash and Flash based development. I
require some help in creating a flash document.
I need to connect to a remote URL file and play the audio, it
is an MP3 file. I have tried some methods but as i am starting from
scratch i do not have any idea and I am stuck.
Basically, i want a simple label like "play" to appear and
when clicked on it connect to a URL specified (probably using
Action script) and play the MP3 file.
I have tried searching the forums and Internet before asking
this question but I did not get any accurate answer.
Kindly respond to this query if anyone has the answer.I
require this very urgently.
Thank you for the support.

You could do something as plain and simple as putting a place
holder movie
clip on the stage and give it an instance name of
placeholder.
Then for your button:
myBtn.onRelease = function(){
placeholder.loadMovie("myURLtoMP3.mp3")
Dan Mode
--> Adobe Community Expert
*Flash Helps*
http://www.smithmediafusion.com/blog/?cat=11
*THE online Radio*
http://www.tornadostream.com
<--check this
***Stop Piracy
http://www.adobe.com/aboutadobe/antipiracy/***
"LeifKolt" <[email protected]> wrote in
message
news:f5ukov$cij$[email protected]..
> Hello,
>
> Can anyone give me the ActionScript to solve this
problem.
>
> I have a button, when this button is clicked I want it
to play an MP3 from
> a
> URL somewhere on the web. In this case
> "
http://www.leifkolt.com/WeAreAllTerrorists.mp3"
>
> I am trying to build my own player within my website
(entirely built in
> flash)
> and don't want to mess with the hassle of a scripting a
playlist etc... I
> just
> want to have the song names as buttons, and when you
click the button it
> plays
> the desired MP3 off of my web server.
>
> Any help is greatly appreciated. THANKS!
>
> LEIF(kolt)
>

Problem with URL File download

Hi every one i am facing a problem with URL File read Technique
import java.awt.Color;
import java.io.DataOutputStream;
import java.io.File;
import java.io.FileOutputStream;
import java.io.InputStream;
import java.net.URL;
import java.net.URLConnection;
import javax.swing.JFrame;
import javax.swing.JLabel;
import javax.swing.JPanel;
import javax.swing.JProgressBar;
public class JarDownloader
     boolean isSuccess = false;
     public JarDownloader(String url)
          downloadJar(url);
     public boolean isDownloadingSuccess()
          return isSuccess;
     private File deleteExistingFile(String filename)
          File jarf = new File(filename);
          if(jarf.exists())
               jarf.delete();
          return jarf;
     public static void main(String args[]){
          new JarDownloader("url/filename.extension");
     private void downloadJar(String url)
          try
               URL jarurl = new URL(url);
               URLConnection urlc = jarurl.openConnection();
               urlc.setUseCaches(false);
               urlc.setDefaultUseCaches(false);
               InputStream inst = urlc.getInputStream();
               int totlength = urlc.getContentLength();
               System.out.println("Total length "+totlength);
               // If the size is less than 10 kb that means the linkis wrong
               if(totlength<=10*1024)throw new Exception("Wrong Link");
               JFrame jw =new JFrame("Livehelp-Download");
               JPanel jp =new JPanel();
               jp.setLayout(null);
               JLabel jl = new JLabel("Downloading required file(s)...",JLabel.CENTER);
               jl.setBounds(10,10,200,50);
               jp.add(jl);
               JProgressBar jpbar = new JProgressBar(0,totlength);
               jpbar.setBorderPainted(true);
               jpbar.setStringPainted(true);
               jpbar.setBounds(10,70,200,30);
               jpbar.setBackground(Color.BLUE);
               jp.add(jpbar);
               jw.setContentPane(jp);
               jw.pack();
               jw.setResizable(false);
               jw.setDefaultCloseOperation(JFrame.DO_NOTHING_ON_CLOSE);
               jw.setLocationRelativeTo(null);
               jw.setSize(220,150);
               jw.setVisible(true);
               int readlngth=0;
               int position=0;
               byte[] readbytes = new byte[totlength];
               while(totlength-position > 0)
                    readlngth = inst.read(readbytes,position,totlength-position);
                    position+=readlngth;
                    jpbar.setValue(position);
               File jarf = deleteExistingFile(filename);
               jarf.createNewFile();
               //FileWriter fwriter=new FileWriter(jarf,true);
               FileOutputStream fout = new FileOutputStream(jarf,true);
               DataOutputStream dout = new DataOutputStream(fout);
               dout.write(readbytes);
               dout.flush();
               dout.close();
               inst.close();
               jw.setVisible(false);
               jw.dispose();
               isSuccess=true;
          }catch(Exception ex)
               isSuccess=false;
}From the above code i received the total length of the PAGE content (i.e here url is a file) when i tried to find the size of that file it return -1.
please help me

I think the real problem is that you don't check the return value from read (it's probably less than data.length indicating an incomplete read). Isn't there a readFully somewhere?

How to read from and write to remote data file?

Hi there
I have two variables that I would like to store in a remote data file which can be accessed by my Flash file. It is for a voting system, so the first variable would be a counter that is incremented each time a user votes, and the second would be the total rating. The average rating would then be calculated from these.
How would one store, retrieve, and then update these variables from the data file?
I can create the system within a single Flash file for a single session, but obviously I'd like multiple users opening the file simultaneously to be able to access the data and update it.
I'm using AS2 in CS3. Any help would be appreciated.

Right, I've made significant progress since I started this topic. I now have my Flash and php files set up, and the communication between them is working. I'm having difficulty now retaining my variables in the php and updating them for the next session. The script that I have is as follows:
<?
$totalRating1 += $_POST['latestRating1'];
$ratingCount1 ++;
$averageRating1 = $totalRating1 / $ratingCount1;
echo "&averageRating=$averageRating1";
?>
The first line receives the variable "latestRating1" from the SWF. The new average rating is calculated and returned to the SWF as "averageRating". When I run it, however, the variables are reset each time. The average rating is always the same as the latest rating. How can I retain the variables so that they are updated and available for the next user?
Any advice would be appreciated. I am very new to php, and don't have any experience with other scripting languages. I'm using ActionScript2.

Reader v11 will not open in Windows Explorer (or browser) when clicking a PDF file; just a flash on the screen.

Reader v11 will not open in Windows Explorer (or browser) when clicking a PDF file; just a flash on the screen. I can open Reader from Programs then open the file. I'm using a laptop upgraded to Windows 7

I do no understand "flash on the screen"; could it be http://support.microsoft.com/kb/2716529 ?

I want to write and read a hex file from the flash buffer of the microcontroller through the USB serial port

hello sir,
I am developing a GUI screen from that i want to write and read a hex file from the flash buffer of the microcontroller through the USB serial port. the driver i am using is FTDID2XX driver.if anyone having examples of loading file through serial port.Please reply me .
Thanks

Looks like you should post your request in the LabVIEW forum, this one here preferentially is for LabWindows/CVI...

Remote URLS

I'm trying to use a remote URL for a datasource. The docs
say:
The URL you decide to use (whether absolute or relative) is
subject to the browser’s security model, which means that you
can only load data from an XML source that is on the same server
domain as the HTML page you’re linking from. You can get
around this limitation by providing a cross-domain service script.
For more information, consult your server administrator.
I've heard of crossdomain files for Flash, but what exactly
is meant here? For example, the RSS reader demo does everything
locally, but a "real" RSS reader wouldn't do that. So how would it
work?

Hi Ray,
The real RSS Reader uses CF or PHP to pull in all the feeds.
We provided all the dummy XML files so the demo would work straight
from the zip.
Check feeds.cfm and feeds.php in the rssreader/data folder.
It gets the feeds from LiveFeeds.XML.
Thanks,
Don

How to get source of remote html file.

i want to read the remote html file source
i don't have any physical / original path of the file
i have only the url path
example url : http://mydomain.com/myhomepage.html
using this url can i get the source of the file myhomepage.html
thanx
senthil.

U can use java.io.*, java.net.* API
here goes a sample code
import java.io.*;
import java.net.*;
public class URLconnecting{
     public static void main(String[] args)throws Exception{
          URL url = new URL("http://www.yahoo.com");
          URLConnection conn = url.openConnection();
          BufferedReader reader = new BufferedReader(new InputStreamReader(conn.getInputStream()));
          String line;
          while( (line= reader.readLine()) != null) System.out.println(line);
          reader.close();

How to Email a remote html file as an attachment

Hi ,
I want to mail an html file as an attachment using JAVAMail. I have only the URL of the remote file.How can i do this? Please show me a way.......

I basically want to send a multipart object as an attachment using java mail.My multipart object contains a remote html file contents and related gifs. I want to send the whole object as attachement so that the user can save it locally and view the html and embedded gifs.this is what i did
MimeMultipart multipart = new MimeMultipart("related");
messageBody.setContent(totContent,"text/html");//totContent is the html file contents.
multipart.addBodyPart(messageBody);
//loop to embed the gifs
messageBody.setDataHandler(new DataHandler(new URL(imagepath)));
messageBody.setHeader("Content-ID", imgName);
multipart.addBodyPart(messageBody);
//loop ends
i want this multipart to be send as an attachment. Please enlighten me.......this is a bit urgent........

Error opening url 'file: What does it mean?

When I test some of my as3 movies a new window opens and I can test the file. Yet when I test other movies I get an (error opening url 'file message.) What causes that? It seems to me that if a movie plays it should also test in a new window.

It doesn' work. I only got the one file open. The swf file won't open at
all. The fla file won't test. But when I debug the fla file the flash player
debugger opens the movie in a new window and I get this message in the
output window: "Attempting to launch and connect to Player using URL
/Users/schweideltyson/Desktop/Circle.swf"
SWF Users:schweideltyson:Desktop:Circle.swf - 2887 bytes after
decompression
Could it be my flash player is not working properly? I wish I knew.

M3u file stream in Flash?

Does anyone know how to go about streaming an .m3u file
through a flash button. I have an m3u file located on a server
accessible through the web. If i type the address to that m3u in my
internet browser, it will open the file and play it in windows
media player. However whenin flash, I add a behavior using the
behaviors panel to "Go to Web Page" on the release of the button,
it will not allow me to open the .m3u file. It also appears to be
opening a different version of windows media player than if I
simply goto my internet browser and manually enter the URL of the
.m3u. Am I properly assigning my .m3u playlist to a button in my
flash .fla, or is there a better way to do this? Please help. This
is an urgent matter and I have seemed to hit a brickwall.

Since you requested advice, mine is to use html forms.
I gotta say I agree. With JQuery being as mature as it is now, I don't see a very good case for Flash-based forms.
Bianca, do you have a reason for wanting to use Flash forms? If nothing else, you will be preventing anyone who uses IOS from using said forms. I say Apple users bring this sort of thing on themselves, but - rightly or wrongly - they do represent an increasing chunk of the browser market.
Adam

[AIR/Desktop] StageWebView doesnt load remote URLs when rendermode is direct

Hey there,
Im porting an CS6-AIR-App from IOS to Desktop, in the IOS-App, i use rendermode GPU, everything works fine.
In the Desktop-App im using renderMode "direct" (no GPU mode selectable in CS6).
Some strange behavior came up.
If rendermode is "auto" (or cpu), StageWebView loads local and remote html, but the App is slow, not an option.
If rendermode is "direct", StageWebView loads local, but not remote html, though the App is fast now.
My Fallback is to use HTMLLoader and it works with both rendermodes for both local/remote urls.
Question: is there any drawback using HTMLLoader instead of StageWebView (e.g missing hardware accelaration)?
Anyway, It would be nice to know whats going on and why StageWebView doesnt work.
Using: captive/included runtime Air 3.5+3.6, Flash CS6, OSX 10.7.5.
thanks,
V.

I'm also having problems with StageWebView:
- Only in Desktop (iOS and Android work fine)
- Only with AIR 3.6 and 3.7 beta (older versions such as 3.5 work fine)
- But in my case it happens BOTH with Direct mode and CPU mode
In my case, the page is just shown black, no content, and no events are fired. That's why I filed this bug:
https://bugbase.adobe.com/index.cfm?event=bug&id=3514201
I've also tried to use the ASC 1.0 version or AIR 3.6 and the problem persists, so it's not a problem with the new compiler, but with AIR 3.6 itself.
Please, vote the above bug report, to try to get this fixed!

Error opening url 'file ///undefined'

Hey everyone. I'm new to actionscript and I'm having some issues. Here is my code:
function onFinish(success_boolean, results_obj, xml)
    if (success_boolean)
        play ();
    } // end if
} // End of the function
Stage.align = "MC";
Stage.scaleMode = "noScale";
url = "25904";
_root.cacheKiller = "true";
stop ();
var parsed_obj = {};
var unCash = new Date().getTime();
if (_root.cacheKiller == "true")
    fileToLoad = url + "_main.xml?cacheKiller=" + unCash;
    fileToLoad = url + "_main.xml";
else
    fileToLoad = url + "_main.xml";
} // end else if
gs.dataTransfer.XMLParser.load(fileToLoad, onFinish, parsed_obj);
_root.emp.useHandCursor = 0;
_root.mus = 1;
_root.n = 1;
_root.num = 1;
when I try to test mouvie in Flash I received the following error:
Error opening URL 'file:///O|/W%20E%20B%20%20%20%20D%20E%20%20S%20%20I%20%20G%20%20N/web%20design/25904/sou rces/flash/TRY/25904undefined'
I don't know what the probblem is..
Can anyone help me? pls!!!

Use the trace function to track down what values you are trying to process. The error is telling you it cannot find the file for the path specified, and the path that it is identifying seems to be showing that there is a problem not only with the path (appears to have several blanks spaces) but also the file name.
Try tracing the url value before it gets sent to the loading line, as in... trace(url) and see what it shows.

Problem creating an image from a remote url

I am creating a servlet which does the following:
1. retrieves an image from a remote url
2. resizes the image
3. sends the image to the client.
The servlet works fine when I run it on my PC, but when I run it on the server, it doesn't. Here's the problematic code
    private Image getRemoteImage(String imageUrl) throws Exception {
        System.err.println("in getRemoteImage()");
        if (!imageUrl.startsWith("http://")) imageUrl = "http://" + imageUrl;
        URL u = new URL(imageUrl);
        System.err.println("imageUrl: " + imageUrl);
        HttpURLConnection huc = (HttpURLConnection) u.openConnection();
        huc.setRequestMethod("GET");
        System.err.println("connecting...");
        huc.connect();
        System.err.println("Getting DataInputStream...");
        DataInputStream in = new DataInputStream(u.openStream());
        //DataInputStream in = new DataInputStream(huc.getInputStream());
        System.err.println("...got");
        int numBytes = huc.getContentLength(); //1063
        System.err.println("numBytes: " + numBytes);
        byte[] imageBytes = new byte[numBytes];
        System.err.println("reading fully...");
        in.readFully(imageBytes);
        System.err.println("...read");
        in.close();
        System.err.println("creating imageIcon");
        ImageIcon imageIcon = new ImageIcon(imageBytes); //   <-- problem here
        System.err.println("** THIS LINE IS NOT REACHED **");
        System.err.println("creating image");
        Image image = imageIcon.getImage();
        System.err.println("returning image");
        return image;
    }When I access the servlet with FF, the browser reports:
The image �<my servlet url>� cannot be displayed, because it contains errors.
When I access the servlet with IE, I get:
Apache Tomcat/4.0.3 - HTTP Status 500 - Internal Server Error
type Exception report
message Internal Server Error
description The server encountered an internal error (Internal Server Error) that prevented it from fulfilling this request.
exception
javax.servlet.ServletException: Servlet execution threw an exception
     at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:269)
     at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:193)
     at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:243)
     at org.apache.catalina.core.StandardPipeline.invokeNext(StandardPipeline.java:566)
     at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:472)
     at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:943)
     at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:190)
     at org.apache.catalina.core.StandardPipeline.invokeNext(StandardPipeline.java:566)
     at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:472)
     at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:943)
     at org.apache.catalina.core.StandardContext.invoke(StandardContext.java:2343)
     at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:180)
     at org.apache.catalina.core.StandardPipeline.invokeNext(StandardPipeline.java:566)
     at org.apache.catalina.valves.ErrorDispatcherValve.invoke(ErrorDispatcherValve.java:170)
     at org.apache.catalina.core.StandardPipeline.invokeNext(StandardPipeline.java:564)
     at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:170)
     at org.apache.catalina.core.StandardPipeline.invokeNext(StandardPipeline.java:564)
     at org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:468)
     at org.apache.catalina.core.StandardPipeline.invokeNext(StandardPipeline.java:564)
     at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:472)
     at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:943)
     at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:174)
     at org.apache.catalina.core.StandardPipeline.invokeNext(StandardPipeline.java:566)
     at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:472)
     at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:943)
     at org.apache.ajp.tomcat4.Ajp13Processor.process(Ajp13Processor.java:429)
     at org.apache.ajp.tomcat4.Ajp13Processor.run(Ajp13Processor.java:495)
     at java.lang.Thread.run(Thread.java:534)
root cause
java.lang.NoClassDefFoundError
     at java.lang.Class.forName0(Native Method)
     at java.lang.Class.forName(Class.java:141)
     at java.awt.Toolkit$2.run(Toolkit.java:748)
     at java.security.AccessController.doPrivileged(Native Method)
     at java.awt.Toolkit.getDefaultToolkit(Toolkit.java:739)
     at javax.swing.ImageIcon.(ImageIcon.java:205)
     at myservlets.GetImage.getRemoteImage(GetImage.java:283)
     at myservlets.GetImage.processRequest(GetImage.java:73)
     at myservlets.GetImage.doGet(GetImage.java:394)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:740)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
     at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:247)
     at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:193)
     at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:243)
     at org.apache.catalina.core.StandardPipeline.invokeNext(StandardPipeline.java:566)
     at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:472)
     at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:943)
     at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:190)
     at org.apache.catalina.core.StandardPipeline.invokeNext(StandardPipeline.java:566)
     at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:472)
     at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:943)
     at org.apache.catalina.core.StandardContext.invoke(StandardContext.java:2343)
     at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:180)
     at org.apache.catalina.core.StandardPipeline.invokeNext(StandardPipeline.java:566)
     at org.apache.catalina.valves.ErrorDispatcherValve.invoke(ErrorDispatcherValve.java:170)
     at org.apache.catalina.core.StandardPipeline.invokeNext(StandardPipeline.java:564)
     at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:170)
     at org.apache.catalina.core.StandardPipeline.invokeNext(StandardPipeline.java:564)
     at org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:468)
     at org.apache.catalina.core.StandardPipeline.invokeNext(StandardPipeline.java:564)
     at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:472)
     at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:943)
     at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:174)
     at org.apache.catalina.core.StandardPipeline.invokeNext(StandardPipeline.java:566)
     at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:472)
     at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:943)
     at org.apache.ajp.tomcat4.Ajp13Processor.process(Ajp13Processor.java:429)
     at org.apache.ajp.tomcat4.Ajp13Processor.run(Ajp13Processor.java:495)
     at java.lang.Thread.run(Thread.java:534)
Any ideas?
Cheers,
James

Cheers rebol.
I've tried that (along with all other kinds of techniques I never knew existed). I think it might be a problem with the Tomcat setup - it may need to run headless (sounds a bit severe!...).

Preventing remote url file reads in Flash

Similar Messages

Maybe you are looking for