The configuration file
Form2Flash uses a single configuration file for all it's settings, called
"Form2Flash.cfg". The configuration file must be placed in the same
directory as the Form2Flash executable, your cgi-bin directory. The
configuration file can contain many configurations, and a default
configuration. Here is a typical example:
- [default]
- Root="d:/www.kessels.com/html/"
Accept="*.swf"
- [MyMovies]
- Root="d:/www.kessels.com/html/swf/"
Accept="*.swf,*.swt"
- [Test]
- Root="d:/www.kessels.com/html/Form2Flash/demo/"
This example contains a default configuration and two other
configurations. Form2Flash will only accept parameters that match one
of these configurations. Files outside the configured directories
cannot be used.
| Parameter |
Description |
| [configname] |
Start a new configuration section. You can use the text inside the
square-brackets for the "Cfg" parameter of Form2Flash.
The settings in the "default" section will be used as the default
settings for all other configurations.
|
| Root |
This parameter specifies a path that is automatically prepended to
the "File" parameter of Form2Flash. Files outside of this
root-directory cannot be accessed (you cannot use ".." to escape
from the Root directory).
|
| Accept |
A list of comma-separated masks. If the Form2Flash "File"
parameter fits one of these masks then access is granted. You must
specify at least one "Accept" mask, default is to deny access
to all files.
|
| Deny |
A list of comma-separated masks. If the Form2Flash "File"
parameter fits one of these masks then access will be denied.
Deny-masks are optional, default is to grant access to all files that
have been passed by the Accept mask(s).
|
| ...other... |
You can specify any other setting here, available in your movies as
normal macro's, just like parameters passed from a form.
|
About security
Form2Flash will deny access to any file in any directory on your
webserver, unless the parameters match a section in the configuration
file. Do not specify something like "/" as your root directory or "*"
as a mask, or hackers might download things such as your password
file!
Providers can install Form2Flash as a service to their users in a central
cgi-bin directory. The configuration file could be something like this,
assuming all virtual webservers have a shared mountpoint:
- [default]
- Root="/usr/local/WWW/"
Accept="*.swf,*.swt"
|