password protection?

[orlanime]

I need to create a password protection for a Flash site. No user name, just a password. I was able to do so ( type word in to go 'blah' if it's the right one, but if it's the wrong one you won't goto 'blah'). As I was testing it (published the html and swf versions) I was still able to right click my mouse and gor FORWARD and REWIND at will to and fro the page that's supposed to be 'protected'. Is there a code for flash to disable any sort of forwarding/rewinding within the password acceptance area before it reaches the final destination?

The whole above process is enclosed in a Flash movie.
Here's the simple code for my 'submit' button:

On (release){
if (pass eq "blah") {
gotoAndStop (2);
}else{
gotAndStop (3);
}

Thanks in advance...

[Webforumz Staff]

When publishing a Flash movie you can turn off the right-click menu, however this would not stop someone from downloading the SWF and fast-forwarding, etc, manually.

More importantly, if you open your Flash file with a text editor you will see the password there in plain site. There are also Flash decompilers which take apart swf files in a controlled manner and bypass password protection.

Quite simply, you can not protect content held in a SWF file. If you have important information then store it server-side and setup a basic authentiction system between Flash and the server. That is the only fullproof way.

If you want to keep your current setup you could create a function that checks the frame number and prevents certain frames from being viewed if the password has not been entered, but this would not stop a Flash decompiler, or someone simply opening up the SWF in a text editor and reading the content.

[smiversonline]

Change your hosting to someone that deals through cpanel and you will find password protection easy it will do it all for you , contact andy@madasafish.com and he will sort every problem you have straight away

[Webforumz Staff]

Originally Posted by smiversonline

Change your hosting to someone that deals through cpanel and you will find password protection easy it will do it all for you , contact andy@madasafish.com and he will sort every problem you have straight away

That sort of protection is folder based and only allows someone to see HTML pages once the correct username/password has been entered. It's severely limited and not particularly user friendly!

[aernative]

Ok - this is one that we have researched in depth - and basically this is the bottom line -

As it is impossable with the current version (7) to connect to a script to download data on an SSL connection it is not possable to create a "natively" secure system to login.

However - it is possable to use a hashing mechanism to store a "hashed" password in your movie, this means that analysing the source will not help a would be hacker.

Also nesting your movies within one another prevent the next-frame hack. Or alternatviely, use a "stub" movie to load the final movie upon sucessfull login.

[JohnMitch]

I've actually seen this done without SSL and all that good stuff. I don't know the coding, I'm sure I could figure it out if I wanted too but just don't have the time at the moment. But you can insert code where if someone right-clicks and hits play it re-loads the movie.

Also, this is kind of off the topic but sorta on. SSL sites have been reported getting thier information stolen because of the locations people are storing thier information. So just becuase you are using a SSL Certified webspace doesn't mean your information will stay there. Just a little tip to everyone who buys a lot online.