After a lot of reading and digging around, it looks like I am going to have to give up on Netscape compatibility for the time being.
Reason: There is a known bug with Flash/Netscape when sending variables via POST. The resulting HTTP headers (which would contain the variable name/data pairs) become corrupted. The only option would be to send the variables from the SWF to the PHP file via GET, but in this case the variable info (score var and score, etc.) would be seen in the URL bar and thus easily spoofed by a malicious user.
I considered adding basic encryption to the score (say, an MD5 hash) but that really isn't accomplishing much since it can be cracked so easily. There really is no way to make the transmittal of data between the SWF and PHP completely secure, but I think that by using GET we would just be inviting problems.
Unless somebody can come up with a better way, I am just going to dump Netscape support for now and concentrate on getting this sucker out the door. If anybody knows more about this issue or has any ideas, please, please let me hear them. Thanks.
|