Comments on: How to sitelock a Flash movie http://www.emanueleferonato.com/2008/03/10/how-to-sitelock-a-flash-movie/ italian geek and PROgrammer Thu, 11 Mar 2010 10:43:59 +0000 http://wordpress.org/?v=abc hourly 1 By: Dennis | headjump.de http://www.emanueleferonato.com/2008/03/10/how-to-sitelock-a-flash-movie/comment-page-1/#comment-481393 Dennis | headjump.de Wed, 05 Aug 2009 20:32:00 +0000 http://www.emanueleferonato.com/2008/03/10/how-to-sitelock-a-flash-movie/#comment-481393 Hi there, it's really important to understand (what was already said) that the code in the post won't prevent embedding the swf from an allowed host to ANY webpage. The "window.location" is the right idea there, BUT you have to use: window.top.location because window.top refers to the "most top" window, e.g. if your allowed domain is "allowed.com" and the evil domain "evil.com" just puts an iFrame on their site that contains the page from "allowed.com" with the game, window.location will say "allowed.com", but window.top.location will reveal "evil.com". - Dennis Hi there,
it’s really important to understand (what was already said) that the code in the post won’t prevent embedding the swf from an allowed host to ANY webpage. The “window.location” is the right idea there, BUT you have to use:

window.top.location

because window.top refers to the “most top” window, e.g. if your allowed domain is “allowed.com” and the evil domain “evil.com” just puts an iFrame on their site that contains the page from “allowed.com” with the game, window.location will say “allowed.com”, but window.top.location will reveal “evil.com”.

- Dennis

]]> By: Flashtoo http://www.emanueleferonato.com/2008/03/10/how-to-sitelock-a-flash-movie/comment-page-1/#comment-479186 Flashtoo Fri, 31 Jul 2009 17:32:35 +0000 http://www.emanueleferonato.com/2008/03/10/how-to-sitelock-a-flash-movie/#comment-479186 NewGrounds uses uploads.ungrounded.net, not uploads.undergrounded.net . NewGrounds uses uploads.ungrounded.net, not uploads.undergrounded.net .

]]> By: Internet Hobo http://www.emanueleferonato.com/2008/03/10/how-to-sitelock-a-flash-movie/comment-page-1/#comment-447888 Internet Hobo Wed, 13 May 2009 00:31:35 +0000 http://www.emanueleferonato.com/2008/03/10/how-to-sitelock-a-flash-movie/#comment-447888 Somebody could get around this by adding a query string with ?_url=http://www.gooddomain.com or something though when they embed the file. Is there some way to determine where the swf is actually embeded? Somebody could get around this by adding a query string with ?_url=http://www.gooddomain.com or something though when they embed the file. Is there some way to determine where the swf is actually embeded?

]]> By: dino http://www.emanueleferonato.com/2008/03/10/how-to-sitelock-a-flash-movie/comment-page-1/#comment-420954 dino Thu, 02 Apr 2009 00:59:36 +0000 http://www.emanueleferonato.com/2008/03/10/how-to-sitelock-a-flash-movie/#comment-420954 Wouldn't it be better to drop the split and just check if the beginning is equal to "http://www.mydoamin.com/"? Wouldn’t it be better to drop the split and just check if the beginning is equal to “http://www.mydoamin.com/”?

]]> By: dino http://www.emanueleferonato.com/2008/03/10/how-to-sitelock-a-flash-movie/comment-page-1/#comment-420945 dino Thu, 02 Apr 2009 00:51:50 +0000 http://www.emanueleferonato.com/2008/03/10/how-to-sitelock-a-flash-movie/#comment-420945 How can you be sure www or even http is always included? I never type www when going to a website. How can you be sure www or even http is always included?

I never type www when going to a website.

]]> By: Jan http://www.emanueleferonato.com/2008/03/10/how-to-sitelock-a-flash-movie/comment-page-1/#comment-397512 Jan Fri, 27 Feb 2009 08:24:02 +0000 http://www.emanueleferonato.com/2008/03/10/how-to-sitelock-a-flash-movie/#comment-397512 ------------------------------------ ----------Emanuele Feronato--------- ------------------------------------ You are Great!!!!!!!!!!!!!!!!!!!!!! many thanks to you and others like you. Netherlands ————————————
———-Emanuele Feronato———
————————————
You are Great!!!!!!!!!!!!!!!!!!!!!!
many thanks to you and others like you.

Netherlands

]]> By: Excit: Post-Mortem | Game Reviews, Game Download, Computer Games http://www.emanueleferonato.com/2008/03/10/how-to-sitelock-a-flash-movie/comment-page-1/#comment-384756 Excit: Post-Mortem | Game Reviews, Game Download, Computer Games Sat, 07 Feb 2009 06:21:40 +0000 http://www.emanueleferonato.com/2008/03/10/how-to-sitelock-a-flash-movie/#comment-384756 [...] were were completely oblivious about how the flash game business works. We didn’t implement a sitelock, we didn’t implement Mochiads, we didn’t implement Mochibot, we didn’t even [...] [...] were were completely oblivious about how the flash game business works. We didn’t implement a sitelock, we didn’t implement Mochiads, we didn’t implement Mochibot, we didn’t even [...]

]]> By: Richard http://www.emanueleferonato.com/2008/03/10/how-to-sitelock-a-flash-movie/comment-page-1/#comment-384523 Richard Sat, 07 Feb 2009 00:05:01 +0000 http://www.emanueleferonato.com/2008/03/10/how-to-sitelock-a-flash-movie/#comment-384523 Hey there, if anyone needs an Actionscript 3 version of this tutorial, I've written one on my blog - http://notejot.com/2009/02/sitelocking-an-actionscript-3-flash-game/ Hey there, if anyone needs an Actionscript 3 version of this tutorial, I’ve written one on my blog – http://notejot.com/2009/02/sitelocking-an-actionscript-3-flash-game/

]]> By: Luke http://www.emanueleferonato.com/2008/03/10/how-to-sitelock-a-flash-movie/comment-page-1/#comment-366848 Luke Mon, 05 Jan 2009 10:42:16 +0000 http://www.emanueleferonato.com/2008/03/10/how-to-sitelock-a-flash-movie/#comment-366848 ACTUALLY try this browserurl = flash.external.ExternalInterface.call("function(){return window.location.href}").toString(); ACTUALLY try this
browserurl = flash.external.ExternalInterface.call(“function(){return window.location.href}”).toString();

]]> By: Luke http://www.emanueleferonato.com/2008/03/10/how-to-sitelock-a-flash-movie/comment-page-1/#comment-366845 Luke Mon, 05 Jan 2009 10:38:52 +0000 http://www.emanueleferonato.com/2008/03/10/how-to-sitelock-a-flash-movie/#comment-366845 flash.external.ExternalInterface.call( "function get_url() { return window.location.toString(); }" ) what about this ? flash.external.ExternalInterface.call( “function get_url() { return window.location.toString(); }” )

what about this ?

]]>