I have a game that I'm thinking of converting to Flash in order to beef up security for it. The game generates a few random numbers that are used to determine the winning combination in an Instant Win type of game.

These random numbers need to be stored in Flash variables or hidden Flash form fields and eventually sent on to a cgi on our server.

Is it possible to spy on the value of variables or form fields if they aren't hardcoded anywhere in the movie? If so, how easy is it to do? What would be involved for the would be hacker? I need to assess wether it is enough of a security risk to squash the project.

Thanks.

Paul G

I think I understand where youre going. You want a user to click on a button or banner ad to see if they are an instant winner?
For the security issue...Its hard to download a swf and open it in flash to see whats inside. You almost need to have the FLA file. There is an option when you publish your swf to protect from import. Personaly I havent been able to do much with imported swf's. I just get a bunch of key frames in one layer. I even loose sounds, let alone variables.
For the hidden field issue...Flash can GET values from a DB and CGI.
Hope that helps. Good luck.