Protecting FMS Apps from Free Loaders

From Peldi:

Peldi wrote on July 25, 2003: If someone finds out the name of your flashcom server and of one of your app, they can host your swf on their web servers and claim your app as their own; believe it or not, it happened to my PPhone app. :(

There are two ways to protect your apps from this hack:

1.If you have access to your VHost.xml file, use the "Allow" tag to specify your web server's domain, as described in the Managing_Flashcom PDF on macromedia.com: The <Allow> tag lets you specify domain names from which client applications should be allowed to connect to this virtual host. The default value is all, which allows connections from any domain. If no value is specified, only connections from the domain that is being connected to are allowed. If you list specific domains in this tag, only connections from those domains are allowed. Separate each domain name in the list with a comma.

2.Add the following few lines in your application's onConnect method (in your main.asc):

if (client.referrer != "http://mydomain/myfile.swf") {
 application.rejectConnection(client);
 return;
}

Just a little tip. In both options I recommend adding both your web server's address and your own machine's address (makes it easier for developing, you won't have to upload your swf every time you want to test your movie...).