[cross-domain-policy]
[site-control permitted-cross-domain-policies="master-only"/]
[allow-access-from domain="mysite.com" to-ports="999,8080-8082"/]
[/cross-domain-policy]

I’m also stuck on the flash security model, you can get a better idea what your problem is by enabling policy file logging, illustrated in the below url.

http://www.adobe.com/devnet/flashplayer/articles/fplayer9_security_05.html

My server is a Rabbit RCM3800 microcontroller which I can connect to if I run my flash file as a “local-trusted” file. But when I run it “remote” or “local-with-networking” the policy security model prevents me from connecting.

I send the policy file by listening on port 843, and when I receive I write an ASCII stream to that socket which looks like:

Unfortunately I get this warning (and a subsequent error):

Warning: Timeout on xmlsocket://192.168.1.59:843 (at 3 seconds) while waiting for socket policy file.

Error: Request for resource at xmlsocket://192.168.1.59:3333 by requestor from file:///C:/xxx.swf is denied due to lack of policy file permissions.

Have a look here:

http://www.mikechambers.com/blog/2007/05/07/actionscript-3-mysql-library/

Remember, the advantage of using middleware such as CF8 or PHP etc. is that the code never leaves the server. Passing the username and password over to the browser so it can be run in Flash leaves your database wide open.

You could use this method if the information is not private (say for displaying certain pages depending on the time of year or something).

You could have a user account with READ ONLY permissions for this. However INSERT,UPDATE and DELETE would be unwise.

HOWEVER… I can think of a way of actually doing this Flash by writing a mini server app working as middleware. This would have to run on the server itself, so unless you host your own server there is no way to get the .swf to run ON the server.

I recommend sticking with middleware PHP or CF8, hope this helps

caspianit.co.uk

Dude, the reason you can’t connect to gmail servers is because it needs to be over a secure connection, just connecting to port 995 isn’t enough. You need to use SSL (TLS). I don’t know how to do that yet myself otherwise I would post the code, but that’s the direction you need to look in

Lee, I think you’re a star. You’re a great instructor. Many, many thanks. The only, small, small thing though is of coarse your an Adobe evangelist, so whilst you make everything look super-duper easy-peasey, some of the tutorials no longer work

I’m getting, with the simplist connection attempt – a several second delay, then a security sandbox error.

Fortunately due to a design flaw, there is a way around for the security sandbox, but that only worked with Flash Player 9. Now Flash 10 is out that security flaw has been fixed.

It is now necessary to install a security socket policy server before any connection attempt is allowed. A LOT of digging round the net will reveals very little information. There is some information on how to can get this working with Python and PHP here

However nothing is available for ColdFusion 8 (CF8), which is odd as it’s an Adobe product. Any help here for CF8 and a socket connection would be appreciated.

For further information on the old design flaws (AS3 & Flash 9 and below only) have a look here http://scan.flashsec.org/

Keep rockin’ Lee!

Many thanks again for your tutorials.

Thank you! A very good contributions!

Eli.