Exploiter manipulation of sent player in :FireServer()?

Help and Feedback Scripting Support
#1

Is it possible for an exploiter to manipulate the player instance field sent to the receiving server-side listener for remote events, or is the detection of that handled on hidden roblox backend?

For example, a player wishes to refresh a music title text label once they respawn, and so they request that with event:FireServer(). Would it be possible for them to pretend they were another player, resulting in a very annoying constant refresh of all players music titles?

#2

No it is not possible. The player argument is obtained from the server. So some wizardry goes on that Roblox knows where the connection came from

5 Likes