If I connect a remoteevent, can a client lie to the server about the player name or the position of the player if I check the position of the player on the server?
✓ ANSWER ACCEPTED
Is the player object in remoteevents exploitable?
1 answer
✓ Accepted answer
As kingdom5 said
The server knows what connection the data came from so the player argument is not explitable as the request can only be from that user.
the position on the other hand can be changed by the Player since the Player has Network Ownership of it's Character to reduce input lag
Don't forget to mark my answer as the solution and upvote it if it answered your question :)
This discussion is preserved as it was. New answers, comments, and votes are closed.

2 comments
yes and no, no because the client can change their own position as well
The server knows what connection the data came from so the player argument is not explitable as the request can only be from that user.