Help with cheaters

[DogeMakesGames (Doge)]

Hi! Something has come to my attention lately in one of my games: cheaters can access and delete instances from the server.

This happened just a couple minutes ago and i’m not content with this problem as it is very grave and puts in danger the community of my game, my game and myself.

I’d need some help to find a solution for this, since it doesn’t make me feel secure as of now.

I neither have any knowledge of anti-cheats and how to make one.

Please help!

[SirDynamotor]

Ah, backdoors. Developers’ worst nightmare.

When it comes to cheaters being able to execute server-sided scripts, many developers would say that the game is backdoored.

A backdoor is a malicious script that allows cheaters to execute server-sided scripts, completely bypassing FilteringEnabled and resulting in an utter chaos. This is commonly found in free models and rarely added by rogue developers.

Forgot to state that you can also get backdoor from malicious plugins which is much much worse.

You can’t prevent this by just adding an anti-cheat, even if it’s server-sided since they too can be deleted. You would have to look into the game and search for suspicious require() and getfenv() since they’re commonly found in backdoors.

Removing Backdoors 101

My Method: Press CTRL + SHIFT + F The most common backdoors use require() So search for “Require” [require] Browse for anything out of the ordinary for example a part with a script in it should raise red flags [image] BUT Not all require scripts are bad. Many good scripts use require() For example adonis admin. [image] So if you see something suspicious open the script by clicking on it. If you are unsure about if its a backdoor. You can copy the ID [image] and paste it in here: htt…

UNLESS you have an unprotected remote responsible for deleting instances, at which point you would have to protect it by adding a sanity check (basically a check that prevents misuse by cheaters).

[adudu21 (Null)]

If Exploiters can delete instances serversided its because:

1. Unsecured remote events
   OR
2. Malicious scripts

Something i’ve said awhile ago thats still accurate:

Last time i checked, the first result for “hangout” in the roblox toolbox with unverified creators enabled contains a malicious script.
With roblox’s CTRL + F feature (find all), you can try looking for these references:
bit32
require
game.JointsService
getfenv

Help with an unknown Player:Move warning - #3 by adudu21

A similar topic:

Roblox Cheaters Mass Kicking

Big issue! My game (and matts) with over 200 ccu, just got attacked by some script kiddies, they just kicked everyone we are down to 20 players. We have 0 FREE MODELS, Everything was scripted by me. How are they doing this? How do I fix it? We need help!

[DogeMakesGames (Doge)]

i actually had a delete item event which was very open on what to delete, i fixed it by making everything from a server script! Thank you all for your support!