Help with hitboxes

I need somehow get safely values from client for hitboxes such as “CFrame”, because of positioning offset.
everything other is done on server such as damage, size, and other stuff.
just discovered that exploiters can disconnect old RemoteFunction event and make own, with fake CFrames ( for example giving other player’s root CFrames ) and etc

This might help Model | Roblox Creator Documentation