Hello I’m a small developer I don’t know much about scripting but I’ve created a game and there are a lot of hackers who can steal or get admin permissions. How can I secure my game?
give me a link to your game lets see what is wrong
Add server sided checks. Player uses an admin command? Check on the server if that user id is allowed to use admin commands.
they told me that there is a backdoor how can I solve this problem?
Unless you’re using an unknown free model admin system there probably aren’t any backdoors, if you’ve created your own admin system make sure you check the client that executed a command is able to use commands on the server side.
I’ve used a lot of free models, so this could be it.
When using free models ensure they don’t include unnecessary scripts, studio should give you a warning including the amount of scripts included in a model when you take them from the toolbox.
I wouldn’t suggest taking scripts from the toolbox unless you’re 100% of the script authors credibility, you should always try to make scripts yourself and you can find support here on the devforum when you need it.
You can try and clear your game from any unknown scripts by searching “script” in the explorer and delete any scripts that may be in the workspace or anywhere else you have placed items from the toolbox.
Go into the top bar > VIEW > "Find All / Replace All’
Search for “require(
” and try to see if there is any scripts requiring any modules with numbers. If you find anything, search up the module ID by using this URL and replacing “PLACEIDHERE” with the module ID. Insert into your game and look into it:
Also with this, some free model scripts before the new toolbox security update has obfuscated code with possibly malicious intent. The code will look large and jumbled.
Another thing you can do is type “Script” in your search filter in the Explorer tab. Look through all of your scripts to see if there is anything that you dont want. I highly advise you to delete scripts that you found from toolbox. If you want systems, the Developer Forum has a large variety of open-sourced community resources.
I’d start by removing Admin, if it is compromised, it’ll be easier than fixing it.
this but put classname:script because if you just type script it will search by the name of the script instead of just scripts
Search your game for server scripts using the explorer search function.
These backdoors are often hidden in the weirdest places, for instance parented to a Weld.
Delete all of them if you find any.
Why would this game have an admin panel at all …
Also I noticed a few parts clipping. You can fix that by moving them just a bit off from each other. Like 0.01 …