How can we know which localscript call remote event or function
I want it possible to much because this will make your game hard to exploit.
1 Like
Sadly there is no way to do this. If there was then everyone would use it, but even if you could, the exploiter could just insert a local script and rename it with the same name as the original script. You just have to secure the server, handle everything important like cash on the server. If you have any specific scripts I can help exploit proof them.
just want it return script object
remote.OnServerEvent:Connect(function(script,player)
if script == player.Backpack.LocalScript then
--code
end
end)
by the way there is no way.
RemoteEvents/RemoteFunctions have an automatically assigned argument when using :FireServer() or :InvokeServer(), and thatâs the player instance that triggered the RemoteEvent/RemoteFunction. Using that argument, you can loop through the scripts on a playerâs client and see if any changes were made. There are places that many inexperienced developers are unaware of that exploiters may parent their scripts/UIs to. Most commonly, itâs CoreGui.
Keep in mind that this really wonât work for many advanced exploits, since they generally regenerate themselves automatically upon deletion. You can run a while loop or make some sort of custom event to detect script instancing in the client, but neither are foolproof or completely precise either. Many developers have messed this up and banned people from their games automatically due to false positives.
1 Like
As @XdJackyboiiXd21 said, you canât, but you could use a key for each local script, I donât know what you would do it for or if the exploiter can read the attributes, but itâs an option, right?
local HttpService = game:GetService("HttpService")
Object:SetAttribute("Id", HttpService:GenerateGUID(false))
Speaking of âkeys,â there are ways you can use metatables to detect changes in the client pretty precisely. But, that seems too advanced here. @Milkytillys Iâll make a post on it later if youâre interested!
1 Like
Maybe I misunderstanded it but you can use print(ââ) and use dev console for it lol
thx, I donât understand anything about metatables,
and idk why people use setmetatable({},varible)
I donât understand datastore lol
even idk how to use updateanyc
I donât understand anything about datastore so you are at least lucky with SetAsync() and GetAsync() 
1 Like
sadly its difficult but not impossible what you can do is whenever you are firing the event send the local script path like script:GetfullName() which return the path of the local script (like game.workspace.sccript or game.replicatedStorage etcâŚ) which you then use another remote event to fire the client and look up if there is the script on the client if there is then you can proceed with the code if there is not then you can cancel the script or kick the player
That wouldnât work, unfortunately. For that data to reach the server, itâd have to be an argument of :FireServer(), and exploiters will obviously choose to keep that field empty. Though, your solution could work if checks were made on the server side to not run the function if the field is empty or doesnât reference the specific script required to run it-- again, this can be worked around by removing the original script and replacing it with one that has its exact name. At that point, you would have to use plugins to check the sources of your own scripts or scripts which are instanced into the client.
I can see this working. In fact if you sent player.Backpack.LocalScript from the event, script == player.Backpack.LocalScript is true due to how replication works. Although I donât see how this can be useful (besides limiting what script to listen to), but what you are trying to do is doable and you just did in that little piece of code you wrote.
(of course as TacticalGory pointed out, switch the arguments of the event)
how about make server change localscript name then check script args is same name
then exploiters cant know name if set moudule script parent to nil while running
and if empty argument or no script argument just kick
Maybe you could add the name of the script in the arguments passed via the event/function? Like so:
-- // Remote Event, Server // --
RemoteEvent.OnServerEvent:Connect(function(Player, ScriptName)
Player.StarterPlayer.StarterPlayerScripts[ScriptName] -- Do stuff here
end)I think the problem is that exploiter can mess with these parameter like putting another script name that exist in it
1 Like
Yeah. I would recommend not using these methods to stop hackers. I find it is best to run almost everything on the server. You can have a script where when the player presses a key, it tells the server what key they pressed. It can cause lag having most things run on the server. You can also use remote functions for the server to send information back to the client on what to do. The server makes all of the necessary calculations and runs the game as such, then tells the client what to do. Even if hackers intercept these remote functions there really isnât too much they can do.
iâm interesting now, because i learned metatables and what exploiter can do with metatable