Consider indenting your code so you can easily balance themĮnd - = in this case. It explains the difference between Scripts and LocalScripts and when to use them.Īs for your code, there’s a couple issues: If you’re confused about the client-server model, you should read this article. So anyone claiming to have found a way is most definitely lying and should be reported. The Roblox API (and most other websites’ interfaces) are designed to be unexploitable. It’s why “Free Robux” scams are always fake. So ultimately, it takes a bit of common sense to design a secure API. In fact, there is no possible way for the client to exploit this system. How would you properly secure this then? Any reasonable person could do the following: - serverĮvent.OnServerEvent:Connect(function(plr, car_name) Congratulations! Your game just got exploited. The server is subtracting a negative value from their currency, and subtracting a negative is like addition: it’s adding +9999999 currency to their Money value. This clearly works, so what’s the issue? Well, this is the same thing that FilteringEnabled=true implies: NEVER and I mean NEVER under ANY CIRCUMSTANCES trust that the client sends CORRECT data.įor example: What if a hacker comes along and… event:FireServer("RoClaren", -9999999) - this is a negative amount Local event = 圜arĮvent.OnServerEvent:Connect(function(plr, car_name, price) Since the client can’t directly edit their money and give themselves the car, the client requests that they have their currency removed, like so: - client You (the client) want to buy the top-of-the-line 2021 RoClaren for a small loan of $250,000 in-game currency. Here’s an example of bad practice of client-server communication. You may be asking, “How do I secure my game then?” Assuming your game is securely designed, you’ll be fine. Anything they change will only appear for them and them only. The client cannot change values by itself. Not sure how that might play out but that’s where I’m a bit unsure as to what one can do. Where that’s the case, you can have the server go around and set everyone’s walk speed to a setting all the time, or maybe check the player speed and if they have hacked it, have some consequences. Now the other thing is possibly altering the walk speed since that’s in the player Humanoid. They just see a number written on a piece of paper. So they can hack their eye candy all they want but they can’t access the values that the server has. No.” It then sends a message, saying “Open the Gui that says ‘You can’t afford that’.” “Ok so you have 5 gold and your level is 4. They then ask the server “Can I buy the next level?” Yeah they can then buff those to the max with hacks. They then see the message about how much Gold they have and the level. Here is some info about your Gold and level.”
The server says “Ok so PLayer 1 wants the shop gui to come up. The player asks “Can I open a gui?” by moving to spot or clicking something. The player can’t see its level or unlocks. And then it sends a message back saying “I allowed it.” It says you have the level requirement, I will allow it. Well your profile says you have enough gold.
You have the client Guis (player guis) ask the server if it’s allowed to have something.
0 kommentar(er)
