On Dec 2, 2007, at 06:59, Francois PIETTE wrote:

> And also probably limiting the number of concurrent connections to what
> flash needs.
> And also examine the request header to make sure it comes from the 
> flash
> application. Maybe you can craft some request from your application so 
> that
> the server application knows it comes from your own application.

The request header can be forged easily.  Perhaps you should check the 
incoming connection IP address (on the OnSessionAvailable event) and 
reject it if it's not one of the acceptable set.

        dZ.

-- 
        DZ-Jay [TeamICS]
        http://www.overbyte.be/eng/overbyte/teamics.html

-- 
To unsubscribe or change your settings for TWSocket mailing list
please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket
Visit our website at http://www.overbyte.be

Reply via email to