Webmaster Forum / Flash / Flash Remoting / April 2004

Pls use ASO from http://www.genable.com/aso/

Gud luck!

Create an html file.  Add this line <a
href="http://koolj.0catch.com/ManageFAQ.zip">Get Me</a>.  View the html file
through your browser, then right-click the link and select save as...  
After you download your zip file, install any Flash Decompiler.  I used
Sothink SWF Decompiler. Then open your ManageFAQ.swf file you had in your zip
file.  I can see all your scripts, and resources etc....

If anyone here know how to prevent a user from downloading a .swf file, or
decompiling, please let me know.  If you use Flash Remoting, anyone will be
able to download your movie, decompile it and get access to all your
server-side classes.  With the connection information stored on your movie,
they could create their own movie and make calls to all your data on your
server exposed via the classes, cfc, etc....

Here is ur Actionscript, it is not safe

////////----------------------
    //if(){}
    function tab1() {
        Selection.setFocus("_root.DisplayInquiryList.KeySearch");
        _root.DisplayInquiryList.KeySearch.tabIndex = 1;
        _root.DisplayInquiryList.GoSearch.tabIndex = 2;
        _root.AVBT.tabIndex = 3;
        _root.Backtomenu.tabIndex = 4;
        _root.LogOut.tabIndex = 5;
        _root.DisplayInquiryList.ReDaSort.tabIndex = 8;
        _root.DisplayInquiryList.CateSort.tabIndex = 6;
        _root.DisplayInquiryList.TypeSort.tabIndex = 7;
        _root.DisplayInquiryList.PageNB.bb.tabIndex = 8;
        _root.DisplayInquiryList.PageNB.bn.tabIndex = 9;
        i = 1;
        while (i <= _global.CorRecLevel) {
            obj7 = eval
("_root.DisplayInquiryList.InquiryList_Data.MyText.Record_MC" + i);
            obj7.tabIndex = i + 9;
            i++;
        }
    }
    function tab2() {
        Selection.setFocus("_root.AdvanceSearch.CategoryList");
        _root.AdvanceSearch.CategoryList.tabIndex = 1;
        _root.AdvanceSearch.TypeList.tabIndex = 2;
        _root.AdvanceSearch.rb1.tabIndex = 3;
        _root.AdvanceSearch.rb2.tabIndex = 4;
        _root.AdvanceSearch.rb3.tabIndex = 5;
        _root.AdvanceSearch.keywordtxt.tabIndex = 6;
        _root.AdvanceSearch.Sav.tabIndex = 7;
        _root.AdvanceSearch.CloSav.tabIndex = 8;
        _root.AVBT.tabIndex = 9;
        _root.Backtomenu.tabIndex = 10;
        _root.LogOut.tabIndex = 11;
    }
    function tabCreate() {
        Selection.setFocus("_root.faqCreateForm.CategoryList");
        _root.faqCreateForm.faqCate.tabIndex = 1;
        _root.faqCreateForm.faqtype.tabIndex = 2;
        _root.faqCreateForm.faqtitle.tabIndex = 3;
        _root.faqCreateForm.rb1.tabIndex = 4;
        _root.faqCreateForm.rb2.tabIndex = 5;
        _root.faqCreateForm.rb3.tabIndex = 6;
        _root.faqCreateForm.faqQuest.tabIndex = 7;
        _root.faqCreateForm.faqAns.tabIndex = 8;
        _root.faqCreateForm.CanCre.tabIndex = 9;
        _root.faqCreateForm.Cre.tabIndex = 10;
    }
    function tabEdit() {
        Selection.setFocus("_root.faqEditform.CategoryList");
        _root.faqEditform.faqCate.tabIndex = 1;
        _root.faqEditform.faqtype.tabIndex = 2;
        _root.faqEditform.faqtitle.tabIndex = 3;
        _root.faqEditform.rb1.tabIndex = 4;
        _root.faqEditform.rb2.tabIndex = 5;
        _root.faqEditform.rb3.tabIndex = 6;
        _root.faqEditform.faqQuest.tabIndex = 7;
        _root.faqEditform.faqAns.tabIndex = 8;
        _root.faqEditform.CanEdi.tabIndex = 9;
        _root.faqEditform.Edi.tabIndex = 10;
    }
    function MessageAlert(msg, state) {
        if (Number (state) == 1) {
            msg = "????...";
            _root.LoadingWindow._visible = true;
            _root.LoadingWindow.gotoAndStop(1);
            _root.LoadingWindow.Alert_confirm.textColor = 0;
            _root.LoadingWindow.Alert_confirm.text = msg;
        } else if (Number (state) == 2) {
            _root.LoadingWindow._visible = true;
            _root.LoadingWindow.gotoAndStop(2);
            _root.LoadingWindow.Alert_confirm2.textColor = 16711680 /*
0xFF0000 */;
            _root.LoadingWindow.Alert_confirm2.text = msg;
        } else if (Number (state) == 3) {
            _root.LoadingWindow._visible = false;
        }
    }
    function TextboxReadOnly() {
        _root.DisplayInquiryList.CategoryTIT.selectable = false;
        _root.DisplayInquiryList.InfoTIT.selectable = false;
        _root.DisplayInquiryList.TypeTIT.selectable = false;
        _root.DisplayInquiryList.SubjectTIT.selectable = false;
    }
    function InquiryListEnable() {
        _root.DisplayInquiryList.Info_Scroll.setEnabled(true);
        _root.DisplayInquiryList.InquiryListData.setSortable(true);
        _root.DisplayInquiryList.InquiryListData.setRecordSelectable(true);
        _root.DisplayInquiryList.InquiryListData.refresh();
        _root.DisplayInquiryList.InquiryBT_NoNeed.enabled = true;
        _root.DisplayInquiryList.IquiryBT_Correspond.enabled = true;
    }
    function InquiryListDisable() {
        _root.DisplayInquiryList.Info_Scroll.setEnabled(false);
        _root.DisplayInquiryList.InquiryListData.setRecordSelectable(false);
        _root.DisplayInquiryList.InquiryListData.setSortable(false);
        _root.DisplayInquiryList.InquiryListData.refresh();
        _root.DisplayInquiryList.InquiryBT_NoNeed.enabled = false;
        _root.DisplayInquiryList.IquiryBT_Correspond.enabled = false;
    }
    function UpdateFAQ() {
        param = new Object ();
        param.faqID = _root.FaqSendID;
        param.FAQCategoryID =
_root.Load_Category.CategoryArray[_root.faqEditform.faqCate.getSelectedIndex()].
CategoryID;
        param.FAQTypeID =
_root.Load_Type.TypeArray[_root.faqEditform.faqtype.getSelectedIndex()].TypeID;
        param.title = _root.faqEditform.faqtitle.text;
        param.publicLevelCode = _global.PLL;
        param.question = _root.faqEditform.faqQuest.text;
        param.answer = _root.faqEditform.faqAns.text;
        _global.controller.perform("updateFAQ", param);
    }
    function StoreFAQ() {
        param = new Object ();
        param.faqCategoryID =
_root.Load_Category.CategoryArray[_root.faqCreateform.faqCate.getSelectedIndex()
].CategoryID;
        param.FAQTypeID =
_root.Load_Type.TypeArray[_root.faqCreateform.faqtype.getSelectedIndex()].TypeID
;
        param.title = _root.faqCreateform.faqtitle.text;
        param.publicLevelCode = _global.PLL;
        param.question = _root.faqCreateform.faqQuest.text;
        param.answer = _root.faqCreateform.faqAns.text;
        _global.controller.perform("newFAQ", param);
    }
    function ReachSearch1() {
        _global.ConfirmNum = (Number (_global.PLNum) + Number
(_global.TypeNum)) + Number (_global.CateNum);
        trace ("FAQFAQFAQFAQFAQFAQFA...NOT");
        if (_global.ConfirmNum == 3) {
            trace ("FAQFAQFAQFAQFAQFAQFAQFAQFAQFAQFAQFAQ........." +
_global.ConfirmNum);
            _global.ConfirmNum = 0;
            clearInterval(ClearReSearch1);
            _root.AdvanceSearch.gotoAndPlay("start");
            i = 1;
            while (i <= _global.CorRecLevel) {
                obj7 = eval
("_root.DisplayInquiryList.InquiryList_Data.MyText.Record_MC" + i);
                obj7.enabled = false;
                i++;
            }
            _root.DisplayInquiryList.CateSort.enabled = false;
            _root.DisplayInquiryList.TypeSort.enabled = false;
            _root.DisplayInquiryList.ReDaSort.enabled = false;
            _root.DisplayInquiryList.StatusSort.enabled = false;
            _root.DisplayInquiryList.GoSearch.enabled = false;
            _global.ASOpen = 0;
        }
    }
    function RefreshData() {
        function ReachSearch() {
            _global.ConfirmNumx = (Number (_global.PLNum) + Number
(_global.TypeNum)) + Number (_global.CateNum);
            trace ("NUMBERS OF LIST LOADED..................." +
_global.ConfirmNum);
            if (_global.ConfirmNumx == 3) {
                trace ("FAQFAQFAQFAQFAQFAQFAQFAQFAQFAQFAQFAQ........." +
_global.ConfirmNumx);
                _global.ConfirmNumx = 0;
                clearInterval(ClearReSearch);
                param = new Object ();
                param.faqCategoryID = _global.CateList;
                param.faqTypeID = _global.TypeList;
                param.publicLevelCode = _global.PLL;
                param.keyword = _global.Keyword;
                _global.controller.perform("getFAQSearchResult", param);
                trace (("Category:***" + param.faqCategoryID) + ">>>");
                trace (("Type:***" + param.faqTypeID) + ">>>");
                trace (("PL:***" + param.publicLevelCode) + ">>>");
                trace (("Keyword:***" + param.keyword) + ">>>");
                trace ("ASOPENASOPENASOPEN: " + _global.ASopen);
            }
        }
        _global.Plusplus++;
        _global.controller.perform("getCategoryList", null);
        _global.controller.perform("getTypeList", null);
        _global.controller.perform("getPublicLevelList", null);
        ClearReSearch = setInterval(ReachSearch, 1);
    }
    function InContentEnable() {
        _root.InquiryContent.Content.CorrespondContent.selectable = true;
        _root.InquiryContent.SubjectTxt.selectable = true;
        _root.InquiryContent.SendMail.enabled = true;
        _root.InquiryContent.SaveReturn.enabled = true;
        _root.InquiryContent.CategoryList.setEnabled(true);
        _root.InquiryContent.Content.FooterList.setEnabled(true);
        _root.InquiryContent.Content.HeaderList.setEnabled(true);
        _root.InquiryContent.Content.RelatedInfoList.setEnabled(true);
        _root.InquiryContent.TypeScroll._visible = true;
    }
    function InContentDisable() {
        _root.InquiryContent.Content.CorrespondContent.selectable = false;
        _root.InquiryContent.SubjectTxt.selectable = false;
        _root.InquiryContent.SendMail.enabled = false;
        _root.InquiryContent.SaveReturn.enabled = false;
        _root.InquiryContent.CategoryList.setEnabled(false);
        _root.InquiryContent.Content.FooterList.setEnabled(false);
        _root.InquiryContent.Content.HeaderList.setEnabled(false);
        _root.InquiryContent.Content.RelatedInfoList.setEnabled(false);
        _root.InquiryContent.TypeScroll._visible = false;
    }
    function CreateInquiryList(rs) {
        RecSet = new RecordSet (["ID", "Category", "Type", "RegiDate",
"Subject", "Datafrom", "Status", "InquiryID", "correspondID", "InquiryText",
"SubCorrespond", "Header", "Footer", "RelatedInfo", "TypeID", "CategoryID",
"CorrespondContent"]);
        i = 0;
        while (i < rs.length) {
            if (rs[i].inquiry.subject.length > 30) {