Is it bad practice/security to put scripts in Workspace?
I am doing a remaster of an old game. Obviously, ServerScriptService didn't always exist, so scripts used to just be put into Workspace; generally, I try to put all scripts that aren't local into ServerScriptService. Should I really worry about this? Is leaving a script in Workspace bad? From my understanding, even if the client were to change a script that was in Workspace, it wouldn't replicate to other clients; but I still try to avoid putting things in Workspace. Just curious.
0
1 answer
Why you should put your ServerScripts in ServerScriptService
From what I know, ServerScriptService does not replicate to the client. This means that clients will not have access to the scripts source code if it is located in ServerScriptService. If an exploiter were to change the source code of the script in workspace it would not replicate to the client, but they now have access to your code. They can see how your game works and how you are using remotes. They can than access those remotes to have there client changes replicate to the server. From my understanding, Always put your ServerScripts inside of ServerScriptService.
0