so I've built a little game and want to add a hiscore table to it, it'll be built with MySQL and PHP.
I've already implemented some tricks to hide the score in the game from memory readers - I now want to hide the score from the data sniffers that catch it between the 'submit your score' screen in the game and the PHP script that saves it to the DB.
Has anyone here tackled this before?
The best info I've had so far has come from this thread on Flashkit - yeah I could join flashkit and ask them, but I do like to keep it 12stone 
Anyway, there, webgeek suggests using AES (Rijndael) to encrypt the score before sending, but I'm not sure how to go about doing that in AS3 - anyone know?
how about sending a jpg back of the score?
how do you go about doing that?
saving or decoding?
both
It sounds like an interesting idea - but I reckon for my simple purposes here just a plain encode/decode with a normal encryption technique will do fine. I just need a nice AS3 function to encrypt, and a matching PHP function to decrypt on the server.
this is what I've come up with myself, this maybe enough on its own to prevent the casual attacks:
Invent a simple number encryption script, e.g. turn the num into a string, add some extra numbers, turn it back into a number and do a few simple sums on it - multiply it by something, add something else, multiply again, etc until bored - voila, an encrypted number.
You send that encrypted number, along with the actual score in plain text and then on the server decode the encrypted number by reversing the maths and compare with the plain text score. If they match, accept the score. If they don't, then reject the score and bar that IP for 20 mins or so.
I could further complicate it by creating a handful of variations of that encryption function, numbering them say 1 - 5 and sending along the number of the function to use. Disguise that by also sending a bunch of useless values too.
Course I'll also need to obfuscate my SWF to hide the encryption methods used.
I have done the saving stuff but not sure I have the php, the jpeg encoding is opensource adobe classes and I send with loader and get php to return a small image so that I can get a call back bit hacky but works, decoding depends on the image sent but might be a good project to learn haxe with. But the question was along of the lines yes its possible but no point in me getting something together if you go for something simpler... as you have done and anyway I would prob only want to share the code offline.
save example I changed and posted in another post
Why not just use AMFPHP?
It's pretty easy to use, faster than sending regular http requests up and down AND the data is serialized so pretty much unreadable for the script kiddies. http://amfphp.org/