Hello everyone!!! I just released my game for alpha testing when I saw 2 people planning on using saveinstance on my game - I’m terrified as the game has lots of unique localscripts that I wanna gatekeep… So my question is there a way to prevent users from executing ANY script? I wanna keep those users perma banned
2 Likes
There’s not much you can do to prevent saveinstance.
You can obfuscate your code if you’re really concerned about people stealing it using tools like Luraph but they can still be deobfuscated. (https://lura.ph)
You can also implement client-sided anti-cheats for the first line of defence against exploiters but they are evadable.
2 Likes
How did you see there were planning on using saveinstance?
Most exploits use UniversalSynSaveInstance, which uses UGCValidationService. In Studio, this service exists by default, but in the live Roblox client, it does not. So, you can use ServiceProvider.FindService to see if UGCValidationService exists - and if it does, they are likely using saveinstance.
However, you should note that exploiters have a lot more power over the client than you do as a developer. They can easily hook functions, spoof values, and enable and disable code as they please. This is not to say a client anticheat is a bad thing, just rather that it is very much bypassable and must be implemented correctly to stop any more exploiters than skids.
It won’t stop 100% of exploiters, especially not the very experienced ones; but it can be very effective nonetheless.
as for any exploit script, you’ll need executor specific injection detections. They’re hard to come by and even harder to implement safely, but they do exist. Other methods, such as hook detections, also exist, but the same safety applies to them.
3 Likes
“girl save instance this game and leak it, LOOOL” they were in my server when I was alpha testing 
1 Like
u can try my ac https://www.robloxac.pro/
1 Like
This ac is not for commercial uses, it is filled with false positives and performance problems
can you send me false pos proof, tks
You copy the client side of every single roblox game, and video game on your device, why do you care? They won’t even get the server code for it, and not to mention just report abuse the game if they do ever publish it. (This includes UI, the workspace, client scripts, animations, and anything the client needs to run the game basically)
There is no point in trying to obfuscate your code making it harder on you as a developer to edit/update. And why are you trying to gatekeep code that’s on the client??? Keep sensitive stuff, server side only. (Data handling, anticheats, important systems)
And finally there is no way to prevent users from doing that, all the client “stuff” is replicated to the users computer, so they have full access to it, if they have the proper knowledge and tools.
1 Like
I have a lot of client sided scripts like REALLY advanced and cool. But the fear of it getting leaked by saveInstance() is crazy..