Let’s say you got a pretty good and secure game, and if the exploiter were to try to change a value (lets say car speed) the server does an extra check so the car does not drive faster although the exploiter changed the speed on the client. Anyways, if you see that the client speed and the server speed don’t corellate should you kick the player or should you just do nothing (since he did not manage to exploit, but he/she tried).
Like, how bad is it for an exploiter to be kicked - how hard is it for them to inject their exploits into your game. Is it better to just leave them trying (and get traffic to your game) or kick them in the hopes of them not returning again? I hope you guys understood what I meant. Thanks.
Kicking isn’t efficient as they can just return and do the exact same thing a different way. Realistically, you can only do so much to stop exploiting but there will always be another way unfortunately
I’m pretty sure most exploits support auto-inject and auto-execute. They also have access to CoreGui.
When they get kicked, that popup with message is in the CoreGui (meaning they can tell when it gets added using ChildAdded/DescendantAdded connection), this makes it super easy to make auto-rejoin script when getting kicked, now all they have to do is put that script inside their auto-execute.
If everything is automated like that, kicking will only hold them for like 10-20 seconds (depending on the PC).
Exploits use alts too, unfortunately there is no major way to stop them. You can however deter them, if you use anti-exploits in your game (They’re worthing paying for, don’t use a free one it’s probably a backdoor)
Anyway, using anti-exploits will protect your games, I personally use anti-exploits and anti-saveinstance on all my games to prevent leaks and exploiters. Also ensure you have FE enabled otherwise exploiters will be able to run serverside scripts.
