Here is a brief description.
I have php files that capture the data sent to me via flash (such as username and password). The flash is calling the php page that authenticates the username/password in the mysql database and then i return success/fail back to the flash.
E.G
file= login.php
login.php captures $POST['username'] and $POST['password'], queries the database and returns echo "login=success&user_id=1".
So flash would call 'login.php'.
The problem I face is a security issue. Since it is a game users may attempt to read the flash code, see that php files being called and the parameters required and create their own little scripts to manipulate the data.
Is there a way to ensure that the script calling my php file is the legitimate flash?
Sorry if i'm not making sense and again, thanks for your help.
