can my songs be stolen?

yes. it's easy to check the code in your swf and view the file name you're loading.

use a decompiler (like sothink's swf decompiler) to decompile the code in your swf. it's then viewable as if someone is looking at your fla. and, in fact, your entire fla can be recreated using a decompiler.

even if the viewer has a decompiler, if you have your song files in a restricted folder on the server, the viewer cant download it......can they??

yes, apparently they can. and i'm not sure how restricted you can make a folder and still have flash load the files it contains.

- get your song path from an WebService during flash runtime... it's easy to get messages between server and client but it's better than write path directly into your code! Use with solution 1 and 2

1. If you are on a Apache server use a .htaccess to redirect request that acced directly to your .mp3. This patch can be good for a moment but it exist some trick to bypass that. Block directory listing on your mp3 folder.(easy, low protection)

2. If you are really crank about security you can generate a token and a SHA or MD5 key each time, store in a DB for the current user, this way you can replace physical path. Use it with solution 1.(hard to implement, good protection)

3. best simple solution is to stream your song with FMS... but it cost a lot of money...

no matter who you are, whatever you do,
if you let user to play the song on their pc, they CAN "steal" it.

i can connect the audio out & audio in ports together to record the audio,
if you cant understand this...

erm... i can just play the song, & then put a microphone to record it

the best way to protect the song is: dont play it..