Security Settings

Since version 7 the Flash player security model has prevented data being loaded across domains. This is complicated by the fact that the Flash player treats a domain with 'www.' as a different domain from the same address without the 'www.' (note that the licensing model for the fCMSPro treats 'www.[ your domain]' and '[ your domain ]' as a single site, you don't need an additional license).

In order for the fCMSPro to work with the Flash player's security model you need to take the following two steps:

Creating a crossdomain.xml file

1. Open a plain text editor such as Notepad on Windows or TextEdit on Mac, or start a new XML file in a WYSIWYG editor like Adobe Dreamweaver.

2. Enter the following code:

<?xml version="1.0"?>
<!DOCTYPE cross-domain-policy SYSTEM "http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd">
<cross-domain-policy>
	<site-control permitted-cross-domain-policies="master-only"/>
	<allow-access-from domain="[ your domain ]" />
	<allow-access-from domain="www.[ your domain ]" />
</cross-domain-policy>

Replace both [ your domain ] parts in the above code with your domain name without 'www.'

3. Save the file as crossdomain.xml and using your ftp software or server control panel upload the file to the root directory of your server.

System security in Flash files

In every .fla you create that you use the fCMSPro you must add the following line of Actionscript to the first frame of the timeline:

System.security.allowDomain([ your domain ]");

Make sure you replace the [ your domain ] above with your domain name not including the 'www.'.

When specifying the location of the fCMSBackend folder in the fMaster's parameters, ensure that you include the 'www.'.