#1 2009-01-05 11:25:33

**_dirkeismann_**

crossdomain.xml file for XML-API access to Connect Pro hosted?

Hi,

I need to access the XML-API of a hosted Connect Por account from a SWF file (Flex application) that is located on a different domain. When trying to access the API the Flash Player throws a cross-domain security error (as expected)

When I check this URL of the hosted account I do get a valid crossdomain.xml file:

http://***.emea.acrobat.com/crossdomain.xml

however, the file only allows access to SWF files served from the macromedia.com domain. Any ideas how to add our own domains to this file? Is this supported?

Thanks,
Dirk.

**_gofar_**

Re: crossdomain.xml file for XML-API access to Connect Pro hosted?

Adobe Flash Player Security-Sandbox works. Thanks to this sandbox there are no major security vulnerabilities at this moment of time. Your flash movie is not permitted to load and parse the XML data on a different URL. You need to connect your SWF file with an outside server side script as the middle man. Search for proxy and ASP or PHP or ColdFusion or JSP etc.

I attach a PHP example from the web. It is using Curl.

Use the following pattern:
http://yourdomain.com/proxy.php?url=

To load xml:
http://yourdomain.com/proxy.php?url=htt … cility.xml

Copy and Paste the following in your favourite text editor and save it as proxy.php
If you have any problems (not every web host supports PHP and Curl together) please report.

[code]<?php
        /*
        Simple script to act as a proxy between Flash and PHP
        to get around the sandbox security limitation that stops
        Flash from directly accessing data on other domains.
                   
        This file is released under the modified BSD license.
                   
        Copyright