Flash: link to external site doesn't work when swf is hosted elsewhere

I have a problem with creating a link in a flash movie. The situation is as follows:

1) I have a flash banner with a link in it. In fact, the whole banner is a link (in the source file it's a transparent rectangle).
2) I publish the file, upload it to a webserver, all files in the same folder. I open the page, the banner shows, the link works.
3) I move the banner to another domain, edit the html to link to the proper location, reload the page, I still see the banner.
4) I click the banner, but nothing happens. The link doesn't work anymore.

Is this normal behavior? Do I need to load the banner from the same domain to prevent abuse or something? I've uploaded the files plus the source file so you can test for yourself.
LVL 13
Who is Participating?

[Webinar] Streamline your web hosting managementRegister Today

R7AFConnect With a Mentor Author Commented:
I found the solution. I was trying to get the crossdomain.xml working today, which didn't result in the banner link working. Then suddenly I saw this parameter "allowScriptAccess", which was set to "sameDomain". I googled for it, then found that you could set this to "always", after which the link in the externally hosted banner worked.
You should be able to load the banner and the flash from a different website, as long as you give a COMPLETE URL in the path --


Check to see if the path is full like this.
R7AFAuthor Commented:
You misunderstand. The flash movie loads. I can see it. The only problem is that the link in the movie doesn't work, if (and only if) the movie is loaded from another domain.

The page: www.abc.com/test.html
Banner A: www.abc.com/banner-a.swf
Banner B: banners.def.com/banner-b.swf

Banner A has a working link. The link on banner B (e.g. to wikipedia.org) does not work. What I want to know is why it doesn't work? Am I doing something wrong?
SMB Security Just Got a Layer Stronger

WatchGuard acquires Percipient Networks to extend protection to the DNS layer, further increasing the value of Total Security Suite.  Learn more about what this means for you and how you can improve your security with WatchGuard today!

I got that the first time.  Neither links are FULL links.  Browsers have a better time with the WWW prefix, because they are used to that.  But the -- banners.def.com -- is not a normal link that can be decided by the browser to just put an http:// in front of it.

So as I said, SPECIFY THE FULL PATH, starting with http://  -- then whatever -- and they should work.
R7AF, sounds like a cross domain issue.
have a read here

R7AFAuthor Commented:
I wasn't clear, but I use a full link, so including http://. Sorry for the confusion.

I'm afraid it is something like this. But I'm not reading data from another domain, I'm just linking to it. I can understand that this can be a problem because a malicious banner could redirect you to a different site, e.g. an almost exact copy with a very similar domain name, and that is a security issue because it will not be obvious all the time. I suppose that the crossdomain policy file should be hosted on the other domain, and that's a problem.
flash files can link to external links and they do all the time.  If flash couldn't do this, it would be rather useless, wouldn't it.
blue-genieConnect With a Mentor Commented:
do i understand this correctly.

you  have 2 domains?
EXACT swf embedded in EXACT html files works on one domain and not another? or is the situation something else?
R7AFAuthor Commented:
I think you misunderstand the situation. It's probably a security issue.

Yes. The banner is hosted on another domain, not even a subdomain. See the mockup code below. The banner is hosted on banners.def.com, the page is on www.abc.com. I have tested this on different machines. When I put the banner on www.abc.com, the link works, when the banner is hosted on banners.def.com, it doesn't work.
<object classid="clsid:d27cdb6e-ae6d-11cf-96b8-444553540000" 
	width="245" height="250" id="banner-paris-holiday" align="middle">
	<param name="allowScriptAccess" value="sameDomain" />
	<param name="allowFullScreen" value="false" />
	<param name="movie" value="http://banners.def.com/media/banner-paris-holiday.swf" />
	<param name="quality" value="high" /><param name="bgcolor" value="#ffffff" />
	<embed src="http://banners.def.com/media/banner-paris-holiday.swf" quality="high" bgcolor="#ffffff" 
		width="245" height="250" name="banner-paris-holiday" align="middle" 
		allowScriptAccess="sameDomain" allowFullScreen="false" type="application/x-shockwave-flash" 
		pluginspage="http://www.adobe.com/go/getflashplayer" />

Open in new window

R7AFAuthor Commented:
I found the solution myself, and award blue-genie for the suggestions made.
All Courses

From novice to tech pro — start learning today.