blocks|key|3074189|text|您可能需要检查以下其他问题：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|3074190|Passing+untampered+data+from+Flash+app+to+server?|offset|length|3074191|Q73947+What+is+the+best+way+to+stop+people+hacking+the+PHP-based+highscore+table+of+a+Flash+game.|unordered-list-item|3074192|
|3074193|Q25999+Secure+Online+Highscore+Lists+for+Non-Web+Games|3074194|
的|3074195|Q46415|3074196|3074197|entityMap|0|LINK|mutability|MUTABLE|url|https://stackoverflow.com/questions/46415/|1|https://stackoverflow.com/questions/73947/|2|https://stackoverflow.com/questions/25999/^0|0|0|1D|0|0|7|2I|1|0|0|7|1B|2|0|0|0|0^^$0|@$1|2|3|4|5|6|7|13|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|14|8|@]|9|@$D|15|E|16|1|17]]|A|$]]|$1|F|3|G|5|H|7|18|8|@]|9|@$D|19|E|1A|1|1B]]|A|$]]|$1|I|3|J|5|6|7|1C|8|@]|9|@]|A|$]]|$1|K|3|L|5|H|7|1D|8|@]|9|@$D|1E|E|1F|1|1G]]|A|$]]|$1|M|3|N|5|6|7|1H|8|@]|9|@]|A|$]]|$1|O|3|P|5|H|7|1I|8|@]|9|@]|A|$]]|$1|Q|3|-4|5|6|7|1J|8|@]|9|@]|A|$]]|$1|R|3|-4|5|6|7|1K|8|@]|9|@]|A|$]]]|S|$T|$5|U|V|W|A|$X|Y]]|Z|$5|U|V|W|A|$X|10]]|11|$5|U|V|W|A|$X|12]]]]

You might want to check these other questions:

<ul>
<li>Q46415 <a href="https://stackoverflow.com/questions/46415/">Passing untampered data from Flash app to server?</a></li>
<li>Q73947 <a href="https://stackoverflow.com/questions/73947/">What is the best way to stop people hacking the PHP-based highscore table of a Flash game.</a></li>
<li>Q25999 <a href="https://stackoverflow.com/questions/25999/">Secure Online Highscore Lists for Non-Web Games</a></li>
</ul>

blocks|key|789988|text|你所要求的本质上是不可能的。游戏在客户端运行，因此完全由用户摆布。唯一确定的方法是根据用户的输入(鼠标移动，按键)在服务器上运行游戏的实时模拟，这绝对是荒谬的。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|789989|entityMap^0|0^^$0|@$1|2|3|4|5|6|7|D|8|@]|9|@]|A|$]]|$1|B|3|-4|5|6|7|E|8|@]|9|@]|A|$]]]|C|$]]

What you are asking is inherently impossible. The game runs on the client and is therefore completely at the user's mercy. Only way to be sure is running a real time simulation of the game on the server based on user's input (mouse movement, keypresses), which is absolutely ridiculous.

blocks|key|3074065|text|这里@+stackoverflow已经讨论了这个主题，至少有一部分是这样|type|unstyled|depth|inlineStyleRanges|entityRanges|data|3074066|What+is+the+best+way+to+stop+people+hacking+the+PHP-based+highscore+table+of+a+Flash+game|offset|length|3074067|entityMap|0|LINK|mutability|MUTABLE|url|https://stackoverflow.com/questions/73947^0|0|0|2H|0|0^^$0|@$1|2|3|4|5|6|7|N|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|O|8|@]|9|@$D|P|E|Q|1|R]]|A|$]]|$1|F|3|-4|5|6|7|S|8|@]|9|@]|A|$]]]|G|$H|$5|I|J|K|A|$L|M]]]]

This topic has been covered here @ stackoverflow, at least in part

<a href="https://stackoverflow.com/questions/73947">What is the best way to stop people hacking the PHP-based highscore table of a Flash game</a>

blocks|key|790019|text|正如ssddw所指出的，这基本上是不可能的。发送比分的代码在用户的计算机上运行，用户可以控制它以及在那里运行的所有内容。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|790020|您能做的最好的事情就是定期更改加密机制，以便分数操纵者需要一段时间才能再次弄清楚它。你只能最小化损害，永远不能消除它，但在我工作的网站上，如果我们每天看到的数十万人中只有100人发送假分数，我们认为这是可以接受的。(我们仍然会粉碎那些我们发现作弊的人，但我们不认为这是一个大问题。)|790021|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|F|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|G|8|@]|9|@]|A|$]]|$1|D|3|-4|5|6|7|H|8|@]|9|@]|A|$]]]|E|$]]

As ssddw pointed out, this is fundamentally impossible. The code to send the score is running on the user's computer, and they have control over it and everything that runs there.

The best you can do is to periodically alter the encryption mechanism so that it takes score-manipulators a while to figure it out again. You can only minimize the damage, never eliminate it, but on a site like the one I work for, if we've got only a hundred people sending fake scores, out of the hundreds of thousands we see every day, we consider that well within the realm of acceptable. (We still crush those we catch cheating, but we don't consider it much of a problem.)

blocks|key|793020|text|您至少可以丢弃高于某个您认为合法的阈值的分数。它仍然为更微妙的高分排行榜留出了空间，但至少有助于缓解看到一个不可能获得榜首分数的明显挫败感。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|793021|entityMap^0|0^^$0|@$1|2|3|4|5|6|7|D|8|@]|9|@]|A|$]]|$1|B|3|-4|5|6|7|E|8|@]|9|@]|A|$]]]|C|$]]

You could at least throw out scores that are above some threshold that you would deem legitimate. It still leaves room for more subtle maniputaion of a high scores list, but will at least help relieve the obvious frustration of seeing an impossible to achieve score topping the charts.

I have little knowledge of Flash but for a little Flash game I have to store score and successful tries of users in a database using PHP. Now the Flash runs locally on the users computer and connects to a remote server. How can I secure against manipulation of game scores. Is there any best practice for this use case?

Secure communication between Flash and PHP script

33 天实现自己的 AI 进化论？发文瓜分机械键盘、耳机等万元奖池！点击参加活动：<a href="https://cloud.tencent.com/developer/article/2503022" target="_blank">https://cloud.tencent.com/developer/article/2503022</a> 
 <img src="https://qcloudimg.tencent-cloud.cn/raw/01543e0407db10898a7ee9f420794432.jpg"/>

技术创作特训营有奖征文

翻译质量差，导致语言生硬或混乱。

没有提供实际的解决方法或示例。

解答不清晰，无法理解或解决问题。

页面排版不美观，阅读体验差。

文章

问答

视频

学习中心

腾讯云实验室

直播

竞赛

腾讯云架构师技术同盟交流圈

腾讯云数据库专区

腾讯云原生专区

腾讯混元专区

腾讯云TCE专区

腾讯云Lighthouse专区

腾讯云HAI专区

腾讯云Edgeone专区

腾讯云存储专区

腾讯云智能专区

腾讯轻联专区 

腾讯云开发专区

TAPD专区

腾讯云最具价值专家

腾讯云架构师技术同盟

腾讯云创作之星

腾讯云开发者先锋 

腾讯云AI代码助手

CODING DevOps

Cloud Studio

SDK中心

API中心

命令行工具

文章&问答评论现已支持表情

我对Flash的知识很少，但对于一个小的Flash游戏，我必须存储分数和用户的成功尝试在一个数据库中使用PHP。现在，Flash在用户的计算机上本地运行，并连接到远程服务器。如何防止游戏分数被篡改？对于这种用例，有没有什么最佳实践？

问Flash与PHP脚本之间的安全通信
EN

回答 5

Stack Overflow用户

Stack Overflow用户

Stack Overflow用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问Flash与PHP脚本之间的安全通信EN

回答 5

Stack Overflow用户

Stack Overflow用户

Stack Overflow用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问Flash与PHP脚本之间的安全通信
EN