How do i secure my remote event?

[Omb2a (Omb2)]

Look when sword activate fire server not dealing damage. Then from server play the animation if there is, and if any player touched the sword while the remote is activated he get damage.

[Omb2a (Omb2)]

Make ray also in script. If you used ray in local you will need to fire server and let the script know who got touched by the ray.

That mean exploiters will keep firing that remote and let the script know that everyone got touched.

[GalaxySmediaCaster]

Ok, let me try to use it

then i’ll report the result

[Omb2a (Omb2)]

Exploiters have something called remoteSpy. They can see every remote fired from client. Like if that remote gives money they can keep firing it for infinity money.

[GalaxySmediaCaster]

I know about it, but let me try to use your method

[Omb2a (Omb2)]

Ok, Good luck.,

[GalaxySmediaCaster]

I have problem now…

How do i know local player?

We can’t use game.Players.LocalPlayer anymore, because this script run on server side.

[Omb2a (Omb2)]

When the tool is activated fire server, onServerEvent the first argument is player
remote.OnServerEvent:connect(function(plr)

[Omb2a (Omb2)]

You also can get player from character. When you equip the tool it will be in your character that mean:
local player = game.Players:GetPlayerFromCharacter(Tool.Parent)

[GalaxySmediaCaster]

What do you mean?
i already use this on my old script

@GalaxySmediaCaster

this is code I used in it
On server side:

script.Parent.DealDMG.OnServerEvent:Connect(function(plr,chr)
	debounce  = false
	local a = game.Players:GetPlayerFromCharacter(chr)
	print'no'
	if a then
		chr =a.Character
		print'plr'
		if a.TeamColor ~= plr.TeamColor then
			
			print'ha'
			chr.Humanoid:TakeDamage(10)
			if chr.Humanoid:FindFirstChild("Tag") then
			chr.Humanoid:FindFirstChild("Tag"):Destroy()
			local b = Instance.new("ObjectValue")
			b.Parent = chr.Humanoid
			b.Name = "Tag"
				b.Value =  plr
			else
			local b = Instance.new("ObjectValue")
			b.Parent = chr.Humanoid
			b.Name = "Tag"
					b.Value =  plr
					wait(0.1)
					debounce = false
				end
				
		end
	else
		if chr ~= nil then
		chr.Humanoid:TakeDamage(10)
			print'self'
			wait(0.1)
			debounce = false
		end
		end
end)

Local script in sword (just some of it)

Hitbox.OnHit:Connect(function(hit, humanoid)
	dealdamage:FireServer(hit.Parent)
end)

[GalaxySmediaCaster]

Did i need to get player everytime when player equip item?

[cjjdawg]

I use my own custom solution similar to the Raycast Hitbox module and what I do to verify the hit that works very well is when your attachment hits a character you send the attachment and the part that it hits over to the server, then to verify it you would check if the attachment is a descendant of the sword and you check the distance of the attachment to the instance that it hits, and you would add a cushion to account for lag (My max is 10). Also, you want to add some sort of damage rate limiter, where a character can only be damage after a certain cool down time has elapsed. In addition, you need to track when the character activates the tool on the server and only accept requests while the expected sword activated animation is playing.

[GalaxySmediaCaster]

Can you show the example? I don’t understand.

[Diltz_3 (Diltz)]

Check if attacker near attacked person, to make sure exploiter won’t abuse this remote, also you could try make server-side cooldown.

[Omb2a (Omb2)]

You said how do I know the local player. I said from the tool.Parent that mean local player character, or from using OnServerEvent. When you use it, The first argument is the local player that the remote got fired from.

EDIT: Also, I told you try to get rid from that line:
dealdamage:FireServer(hit.Parent)
Exploiters easily will use it to kill everyone.
Or you can also use like what @Diltz_3 said check if the attacked person is near the attacker. But still he can fire that remote and kill the near player instantly.

[Diltz_3 (Diltz)]

Uhm, but I also said about ss cooldown to prevent from instant killing

[Omb2a (Omb2)]

I saw debounce in the script, but I don’t really know if he used it. It will be good way to put cooldown inside the script.

[GalaxySmediaCaster]

I will do not use debounce in script, because if i use it and player attack many character in one time, that mean some event will dropped and it will do not fair with player.

[GalaxySmediaCaster]

@Omb2a

You said how do I know the local player. I said from the tool.Parent that mean local player character, or from using OnServerEvent. When you use it, The first argument is the local player that the remote got fired from.

if i use tool.Parent then if tool is on player backpack, or in something that store this tool it will cause error when i trying to do something with player

[Omb2a (Omb2)]

You didn’t put equip check in local script?
Like when tool equipped and mouse Click it fire the remote.