Flash password protector

password is stored in the flash file?

This file could definitely not be secure. I can decompile it easily and step to frame 5 myself, isn’t it? If it loads another flashmovie I could use a program like charles proxy or with a firefox plugin to see which activitity/files are loaded. Then I could load that movie directly in my browser.

Is the password stored in a database, a text/xml or in the flash?

shouldnt the password field be hidden like “*” instead of “password”. but either way, if the passwords would be stored in the XML file, it can be seen using a http request / header navigator. Also, the getURL isnt ideal, because wherever your redirected to should also be password proctected, are you sending the data to the URL as well?

Thank you all:
- yes the password is stored in the flash file.
- you have to protect your files from being decompiled OR it will be cracked no matter whats the password protection method used.
- you can simply make the password field appears like this ” * ” but I just let it appears normal for demonestration.

nice

No offence I don’t see any reason why anyone would pay for an insecure none-working product. We could see the loaded movie easily, with http-debugger. It is just this 4 lines of code: http://pastie.org/572156

Thanks for your interest…but again if you protect your file from being decompiled, no one will be able to access the main movie…if not, no flash protector could be useful.
i.e if i didn’t put the correct password in the preview, you wouldn’t be able to see the main movie (as you should know flashden protect the preview file from being decompiled).
Lastly, I don’t use loadmovie function and don’t use that code in your example…so there is no “loaded movie to see (easily), with http-debugger”...So please stop making assumptions.

mknol has a point.

the question is, the password is or is not written somewhere in your code. if it is forget about security.

protect your file from being decompiled – impossible. you may obfuscate the code, and with that you just prolong the inevitable.

cheers

Art101, Great File.

For what it is, you cant get by without a password. Their are many of these logins on here that do this same exact method. I know a bit about this stuff. I have a few on here that store this stuff in databases which is how any password stuff should be handled.

good job:-)

Great file… don’t listen to other people this is just a secure process for the average ones… keep the good job Art101

Greattttttt one .. keep it up =)

Thanks for your positive and reasonable comments

but if you load an URL is the url visible to the person who loads it?

If that person has the correct password, he will see the URL .