Ryzom API

This line is a good candidate for darwin awards ;)

If you put it in your Flash, it can become a hole in the UA of your visitors. I guess you have to put that :

<allow-http-request-headers-from domain="atys.ryzom.com" headers="*"/>

http://atys.ryzom.com/crossdomain.xml, The file come from this server, not from mine.
So, it shall allows incoming-requests from all servers no ? (i hate these security sandbox... ^^)

Phantase uses Flex (also made by Adobe) with success with this crossdomain.xml.

I added <allow-http-request-headers-from domain="atys.ryzom.com" headers="*"/> in the crossdomain, tell me if it works better.

Hi vl,

It's still the same (i've cleaned my cache).
I'm using Flex also (not flash _'). As long as i work on my computer in debug mode, no problem at all. It's only when the release app is hosted on my webserver. This new security depends also on the flash player version as far as i understand.

Would you (for testing purpose) set the <allow-http-request-headers-from domain="*" headers="*"/> as you set it for <allow-access-from domain="*"/> ?

If it's a security hole for you, i will use a custom http service hosted on the same server to get info from the API thru PHP requests.

Thanks,
Neph'

done, tell me if it s better

PERFECT, it's working fine now¶