I am doing a remaster of an old game. Obviously, ServerScriptService didn't always exist, so scripts used to just be put into Workspace; generally, I try to put all scripts that aren't local into ServerScriptService. Should I really worry about this? Is leaving a script in Workspace bad? From my understanding, even if the client were to change a script that was in Workspace, it wouldn't replicate to other clients; but I still try to avoid putting things in Workspace. Just curious.
COMMUNITY QUESTION
Is it bad practice/security to put scripts in Workspace?
1 answer
Why you should put your ServerScripts in ServerScriptService
From what I know, ServerScriptService does not replicate to the client. This means that clients will not have access to the scripts source code if it is located in ServerScriptService. If an exploiter were to change the source code of the script in workspace it would not replicate to the client, but they now have access to your code. They can see how your game works and how you are using remotes. They can than access those remotes to have there client changes replicate to the server. From my understanding, Always put your ServerScripts inside of ServerScriptService.
1 comment
0
Bad answer.
This discussion is preserved as it was. New answers, comments, and votes are closed.
1 comment
The server code is not replicated to the client at all. The answer you accepted && upvoted is a bad answer and I unaccepted it. Consider removing your upvote for it.