Flash 8 - XML - Cache

[nitzicuile]

Hi!

I am developing an application with Flash and XML. This application retrieve all the information from the XML.

My problem is that, these XML has information that I don't want people know... and it starts when the swf and xml files are cached by the browser/flash player

* - I am using Flash 8,
* - XML is not encrypted (Is this a good solution?),
* - ActionScript 2.0,

How about another solution?

Please, let me know if there is any information you need to help me...

Thx lot,

nitz

[simonboris]

hi nitzicuile,

when you load your xml file using xml build in method, load an asp or php file
that generated xml content. That way your xml wont be cached by the browser.

The only downside of this is that you cannot preload it. You have to wait for the onload method of the xml class.

[nitzicuile]

Hey! thanks...

I have to ask my boss if that is the kind of solution he wants...
He was talking about encrypting information between <tabs></tabs> ...

Anyway, anything else?...

[simonboris]

I am not sure about encryption.

Sure you can encrypt your data, but to read or use, you will have to decrypt it. You will need your de-encrytion function or method in your flash. If someone decompile your flash, he will be able to get decryption methods... If he gets your xml file, he will gain access to your data.

If you use server generated xml, no one will have access to the xml data, ontly to the decryption process.

The problem with this is the amount of data to be decrypted. Imagine, you have to decrypt the info before using it...

And don't forget that there is a size limit for xml file to be loaded in flash.
It's about 70ko. Beyon that, you will see flash player run slower... I don't know if the limit have changed with flash 8, but you should read flash specs using xml. Maybe with encryption, your file size will be larger than the limit.

And if this data you want to encrypt is so sensitive, maybe you should'nt use it in your flash...

And how much time will you take to create encryption/decryption process that can be reusable... will it worth the money and time spent ?

Hope it help,

[Skindc]

If the problem is that you want flash to ensure to reload the xml document rather than using a cached version just add add a random number to end of url string and will reload the xml everytime!

var ranNum:Number=Math.ceil(1000*(Math.random()*(1000*Math.random())));
docXml.load('xmldoc.xml?'+ranNum);

[sleekdigital]

I don't know what gave you that idea, but generating the XML dynamiaclly with PHP or any other server side technology does not prevent the browser from caching the XML.

The only good solution I can think of for your case is flash remoting.

[Skindc]

sleek, if your referring to my last comment about using the random number this is to be done in flash, it is a quick resolve to prevent the flash file using a cached version of xml and is not a replacement for remoting, this was not my intention but this can come in handy for smaller projects that need only to import a small xml docs but ensures refreshing of xml document. I have used it in many scenarios for cms for flash content in many cases.

[sleekdigital]

Skindc, no i am refering to simonboris' comment ...

Originally Posted by simonboris

hi nitzicuile,

when you load your xml file using xml build in method, load an asp or php file
that generated xml content. That way your xml wont be cached by the browser.

The only downside of this is that you cannot preload it. You have to wait for the onload method of the xml class.

Sorry that i was not clear about that.

Yes I am aware of your method and I use it myself, but the original poster said he did not want people to be able to see his data.

[nitzicuile]

Uhmm a friend talks to me about "flash remoting"... I am going to read about it...

Maybe is the solution...

About ...

If the problem is that you want flash to ensure to reload the xml document rather than using a cached version just add add a random number to end of url string and will reload the xml everytime!

... I do not want to reload XML, I do not want my XML to be cached on clients machine... thanks anyway! learning never ends...

[simonboris]

hi sleekdigital,

when i say server side generated xml, i mean:

PHP Code:

var f:XML = new XML();
f.ignoreWhite = true;
f.onLoad = function(b:Boolean)
{
  if(b)
  {
    // code...
  }
}
f.load("myFile.php"); // or asp or jsp
// in the server page, i render an xml opbject with header.
// so at the end, i get an xml file
// there is no way a browser can cache this.
// it is server script... and not file exist... 


This work pretty fine for me...