ok, so recently I have become a little paranoid of my gamepass GUI system. everyone tells you to not trust the client, but if you cannot trust it then how can you create a gamepass GUI? the basic way my gui works as of now is the following. if the player clicks on a gamepass to buy it, the localscript prompts the purchase and if it goes through, the localscript fires to the server saying “player has bought gamepass!”, then the server does it’s thing. well, I was thinking about how to secure the remote, but I think I have an even bigger problem. the problem is that my localscript is the thing checking to see if the gamepass has been bought, if it has then the localscript fires the remote. seeing as exploiters can modify this local script, they can probably just trick the script into firing the remote even when the gamepass has not been bought right? basically, I just want to know if there is any way to fire gamepass prompts from the server, and handle the prompts only on the server. thanks in advance, I hope someone can help me solve this.
Gamepass and developer product purchases replicate to the server, meaning you don’t need a remote event to handle it, and you can use MarketplaceService.PromptGamepassPurchaseFinished or MarketplaceService.ProcessReceipt to handle them.
2 Likes