适用于 Flash Builder 4 的 Zend Amf
我创建了一个 flash builder 4 项目，并按照 IDE 的建议使用 zend amf。 但现在是时候在在线 apache 环境中进行测试了。 它有什么安全隐患吗？ 我可以轻松移动或隐藏 zend amf 吗？
非常感谢！
I have created a flash builder 4 project and using the zend amf as the IDE suggests.
But now its time to test in a online apache enviroment.
It is any security risks?
Can i easily move or hide the zend amf?
thanks very much!
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（1）
我正在使用 Zend_Amf 和 Adobe flash builder 4，它工作时没有任何问题。
AMF 提供的唯一安全风险实际上是允许用户通过 AMF 随意执行命令。您可以通过将请求记录到 Zend_Amf 服务器文件来阻止它们。通过限制IP地址和调用该服务的请求数量可以实现更多与安全相关的任务，这种防御可以通过apache配置文件和php.ini来实现。
I'm working with Zend_Amf with Adobe flash builder 4 and it works without any problems.
The only security risk that AMF provides is actually allowing a user to execute commands through AMF as much as he wants. you can prevent them by logging the requests to the Zend_Amf server file. more security related tasks can be achieved by limited the ip address and the number of requests that be called to that service, this kind of defense can be achieved both by the apache configuration file and by php.