The reason to why I'm asking this is because I want to develop a secure whitelist whereby exploiters are unable to manipulate the script to believe they are whitelisted
I've tried userid formats of whitelist however again exploiters can easily manipulate this by executing which modifies either their roblox user id/username

3 comments
You don't need to do this. Just have your whitelist on the server
This is pointless and not a solution for you. Your best option is to use sanity checks not DRM!!
they can't modify their userid, only their name