Member Avatar for raju_boini525

Hi all,

I am working on affiliate network project. it is having flash banners , for that we create dynamic flash empty .swf file , we pass the 3 parameters, they are 1.inner is a dynamic .swf file to load in my empty .swf. 2. url is a redirect url 3.linkid is a affiliate id here my empty swf file is clickable file. I test it in my localhost it working but it is not working on my client server, i am getting 403 forbidden error.

anyone have idea how create flash banner for affiliate network please guide me.

Thanks in advance

Raja

  • 2 Contributors
  • 4 Replies
  • 191 Views
  • 1 Day Discussion Span
  • Latest Post Latest Post by raju_boini525

Dani AI

Generated

A concise checklist and root-cause map for a dynamic SWF that returns 403 on the server (expanding on @MatthewN’s .htaccess hint and the original report from ). Note that Flash Player is end‑of‑life and most browsers block it, so server-side diagnostics are done for historic/maintenance reasons rather than modern deployment. (adobe.com)

First-pass diagnostics (quick, repeatable checks):

  • Inspect the server error log for the exact rejection message (look for phrases like “client denied by server configuration” or mod_security hits).

  • Fetch the SWF with curl to see response headers and whether a referer makes a difference:

    curl -I 'https://example.com/path/empty.swf'
curl -I -e 'https://example.com' 'https://example.com/path/inner.swf'

These steps confirm that the server understood the request but refused to serve it (HTTP 403) and will show whether the block is at the webserver/WAF layer. (developer.mozilla.org)

Likely server-side causes (and what to check):

  • Hotlink/referrer blocking or rewrite rules that return [F] for certain extensions — temporarily disable hotlink protection or allow the domain. (docs.cpanel.net)
  • Web Application Firewall / ModSecurity rules that flag dynamic parameters or SWF payloads — check WAF/mod_security logs and ask host to whitelist the exact URL if needed. (support.cpanel.net)
  • Apache/.htaccess denies or Directory rules (Require/Allow) or filesystem ownership mismatches; the error log will typically name this. (stackoverflow.com)
  • Flash cross-domain/sandbox policy when a loaded inner SWF comes from another host — ensure a valid /crossdomain.xml is served where required. (adobe.com)

If the SWF is generated/served by PHP, verify binary-safe output and correct headers (no BOM or stray whitespace) and use a simple delivery pattern:

header('Content-Type: application/x-shockwave-flash');
header('Content-Length: ' . filesize($file));
readfile($file);
exit;

Also verify file ownership, webserver user access, and any host-level protections (SELinux, hosting control panel rules). If logs point to mod_security/hotlink rules that cannot be changed, provide the host the exact failing URL and timestamp so they can trace the block. For long-term reliability, plan to replace Flash banners with HTML5/Canvas alternatives (Flash is no longer supported). (php.net)

Recommended Answers

All 4 Replies

Member Avatar for Matthew N.

Have you set the correct permissions?

Member Avatar for raju_boini525

Have you set the correct permissions?

i set 777 permission to flash file folder.

Member Avatar for Matthew N.

Have you made a .htaccess file that denies dir listing in the flash folder

Edited by Matthew N. because: n/a
Member Avatar for raju_boini525

Have you made a .htaccess file that denies dir listing in the flash folder

thanks for reply , i have .htaccess file with empty content,i removed it and test but still it is not working.

Raja

Edited by raju_boini525 because: n/a
Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.