I feel like hackers can just fly over to the humanoid and give damage. Or just stand still in one place and somehow tell the server to give damage to the humanoid?
So, would it be better to do health stuff to be on the humanoid or use a custom intvalue or just anything that isn’t the humanoid?
Sorry if this doesn’t make sense, it’s a bit hard to explain. I’ll answer anything in the replies, thanks!
Hackers only have full control of their own Humanoid and character.*
They can:
modify their own humanoid (walkspeed/jump, disable death)
modify their character (fly around, teleport)
*given the right conditions, they can also teleport NPCs/parts around
They cannot interact with other player characters unless:
collisions are on, which means they can use their own character to fly into you and knock you away
the developers create another access point for them such as
– a weapon/tool that damages players
– game mechanics/services/scripts that interact with other players (such as sounds, private messaging, etc)
– some devs are even careless enough to have a remote event they can fire to hurt other players which makes it extremely easy
Exploiters cannot change values (and have the effects replicate to other players) within other user’s humanoids as they do not have network ownership of the given humanoids. The only way an exploiter would be able to do as such would be through either a backdoor in your game, or otherwise people making use of insecure remotes which can be spoofed to have certain effects “appear” to happen.
as far as im aware, damage dealth to players on the client is shown on the other players client, but not on the server. its what causes a lot of those free model guns to break. the player will look alive to everyone else, but only hacker will see the other player dead.