Prevent Cheating With Send Score Flash+php

Well, I've been looking around until now and I've found no solution on that front.


I'm sorry, I really can't think of a solution to your problem... I think you will have to deal with cheaters for now.. I will look further into it though..

Cheers

hmm As far as I can tell there is not a way to stop the loading of a page with flash. But I figure if you can prevent them from ever getting the flash file then cheating will not be a issue.

I have accually acheived that and I thank you and everyone else for the help ^_^.

Hi,

comment on referer - some browsers send a referer (possibly pointing at the embedding html page) - even with sendandload. Internet exploder definately does not.
comment on php delivering the movie non-cachable: it stops people from poking around in their cache files, but you can still get the swf right from the server and analyze it.
comment on obfuscation: it does not stop dedicated people (just those who only know how to click "decompile" in their favorite tool) from reverse engineering your movie, and it does not stop people from watching the dataflow between the movie and the server.

Here is yet another attempt at the cheat problem - every one copy of the game movie is different, so reverse engineering gets rather pointless. I developed this one when decompiling games with ASV was quite popular

Musicman

Musicman, I've read that if you want to deliver Flash (as any other ActiveX) on Internet Explorer for Windows, you MUST NEVER user nocache, because the browser will fail to show the content (because it is mandatory that the browser saves a local copy of the medium prior to execution).

So in any case (being IE for Win by far the most popular configuration) it is not possible to prevent the Flash movie from saving itself on the client.....



What do you mean by "every one copy of the game movie is different"?

Hi,

consider data transmission from the aspect of crypt technology:
- you could have simple transfer (sendandload), or you could have simple transfer of crypted data. In that case the key and algorithm are obviously to be found in the movie. This approach is useful for sending confidential data - crypt with the recipient's public key
- you could have some challenge/response system: the swf talks to the server and gets a crypt key. Then it crypts the data and sends to the server in a second connection. There can be a time limit between receiving the key and sending the message back. Of course the algorithm is in the swf, so reverse engineering the swf still results in a cheat engine
In my experiment there is a key and a time limit, too. But rather than sending an actual key and implementing the algorithm in the swf, the server combines the key and the generic crypt algorithm into a specific algo and implants that one into the swf before delivery. If hackers decide to reverse engineer the swf, they had better do it fast - before the matching crypt key on the server expires

IE caching: I believe this toy works with IE ... at least it did when I made it. Also I believe that loadmovie should be able to load a non-cachable movie on all systems.

Musicman