How would you go about securing a remote that handles an in-game store purchases, would you check on the client if they have the valid amount of money then fire the remote or check on the server? I'm a bit conflicted on this
✓ ANSWER ACCEPTED
How would you go by securing remotes?
1 answer
✓ Accepted answer
The main rule is that unless something is COMPLETELY client exclusive, you are always to assume that the client is wrong to protect yourself again exploits. All data is to be stored on the server, it's important to do all of your 'has enough money?' checks on the server instead of the client.
This discussion is preserved as it was. New answers, comments, and votes are closed.
2 comments
I am not too keen on remotes either, but I think you first check if the client has enough money to buy an item (to prevent most remote spam), then it will fire a remote, the server will then verify if this is true, if it is, the item is purchased.
So what you said is likely the way to go about this, but I do not know the next step either