Protecting Scripts From Third-Party Code - MACROMEDIA FLASH MEDIA SERVER 2-DEVELOPING MEDIA Develop Manual

To use RTMPS, you replace
don't specify a port number, Flash Player connects on the default secure port, port 443. A
secure port is designated with a minus sign. For example, <HostPort>:1935,80,-443</
HostPort>. This example specifies that Flash Media Player listens on any interface on port
1935, 80, and 443, where 443 is designated as a secure port that receives only RTMPS
connections. Attempting an RTMPS connection to 1935 or 80 results in a failure to connect.
Similarly, an RTMP connection to port 443 fails.
You cannot use RTMPS to establish a connection from one Flash Media Server to
another if the server being connected to is behind a firewall that is rejecting RTMP data.
A workaround is to cluster all Flash Media Servers behind the same firewall.
Confirm the location of the client SWF file.
application, use a server-side script to verify that connecting SWF files are coming from the
location you expect (and not from an unknown computer). You can do this by checking the
property of the client object before the server accepts the connection.
client.referrer
Use server-side script precautions.
malicious application can call. Procedures attached to client objects are particularly
vulnerable. Procedures to be aware of include writing to the hard disk without checking the
quantity of data being written, procedures that can be infinitely looped, and so on. If you are
integrating third-party code, you must also protect your application against malice and bugs.
For more information, see

Protecting scripts from third-party code

Flash Media Server has a powerful script security model that lets you safely integrate third-
party code in an FMS application. For example, you could use the security model to prevent
file access or outbound network connections from third-party code. You should also protect
code in an extensible application that allows users to download third-party plug-ins and load
them into the FMS application.To safely integrate third-party code you must protect any
object in your application code that, if accessed by malicious or buggy third-party code, could
cause damage.
The Flash Media Server script security model is not designed to detect or prevent third-
party coding errors such as infinite loops.
96 Application Development Tips and Tricks
in your NetConnection.connect call with
rtmp
In server-side scripts, do not use procedures that a
"Protecting scripts from third-party code" on page
When you deploy a Flash Media Server
. If you
rtmps
96.