so this guy keeps injecting admin into my game and also bypassing Roblox chat filter and I’ve check all my remotes and all my scripts and notting can cashed this from what I’ve found because my remotes only move text from Client to server
Someone who is willing to help reply with a good solution please
Banned = {
p1 = "OhCreo"
}
MsgTemplate = "You've been banned forever from this game. You've been caught exploiting. Please DO NOT do it again."
game.Players.ChildAdded:Connect(function(newPlr) --Playeradded doesn't want to respond to me sometimes.
if newPlr.Name == Banned.p1 then --String match didnt work.
newPlr:Kick(MsgTemplate)
end
end)
you probably have a backdoor in your game from some random free model, you can use control + shift + f to search every script in your game at the same time, then start looking for keywords
a couple keywords are
require
eriuqer
getfenv
loadstring
load
but, there are ways to insert objects without using these keywords
for this, you can search for “UGCService”, I believe this is where most of the bypasses originate from
I don’t have my computer so I can’t write it right now, but I had an idea. HD admin needs the roblox chat system and creates guis to work. It may be an inconvenience, but you could create or find a trusted custom chat system and disable default chat, then create a script that detects if there are any HD Admin guis and deletes them if so.
All of the suggestions here would probably work fine and solve the issue, but it’s like putting a bandaid on a massive cut. You’re not fixing the route problem, all you’re doing is simply fixing HD Admin from being inserted rather than fixing the mechanism that actually allows HD Admin to be inserted in the first place.
A couple things you could check:
Is Loadstring enabled? Might want to turn that off. ServerScriptService > Properties > LoadStringEnabled > set to false.
Do any of your remotes allow for anything whatsoever to be required from an id parameter? If so you might want to only allow certain IDs.
If both of these are false than it’s almost certain your game has a backdoor of some kind. If you’re 100% sure it’s not however and you really think it’s an issue with remotes, you could attempt to log all FireServers as well as the parameters fired with them and see what is fired in the server whenever injection occurs.