Currently I have a local script that is firing to the server then to all clients. The damage or healing is then distributed on each players client. I dont wanna use server because of damage exploitation through remotes. Is this method currently safe. If it's not and further problems could happen are you able to suggest anything to prevent exploiters from accessing these remote events? Thanks
COMMUNITY QUESTION
Should I deal damage/healing on the client?
0 answers
No public answers were preserved for this question.
This discussion is preserved as it was. New answers, comments, and votes are closed.
7 comments
Exploiters can more easily access the Client than the Server, but BOTH are vulnerable based on how ROBLOX is set-up. The best way is to have the remote-event perform all functionalities on the server, except for the firing, oc. Local Scripts on their own will only affect a single client so any damage to other players you wouldn't be able to see.
You say "I dont wanna use server because of damage exploitation through remotes." this isn't an issue but it looks like you are making the client tell the server how much damage to deal. Bad remote communication.
Either way the remote communication will still be exploitable because ur telling which player to damage and thats somewhat impossible to avoid incapaxx
Then why are you letting your players do this anyways so what's the difference if it's done server to client as compared to server server
All damage and healing should be handled on the server. The client should only tell the server what they are healing/damaging. Then, the server must perform sanity checks (distance checks, cooldown, etc.) before manipulating health.
thats a lot of damage
also cant u just get a script that detects rapid change in the health and kick the guy out or something if it does detect? that way u could go ahead and do whatever u want