Loadstring code runner gui

Help and Feedback Scripting Support
#1

Hello I’m trying to make a gui on which you can run code like you can on the dev console but when i enabled loadstring in server script service it give me warning that my game will become vulnerable to exploiters so i tried to secure it by adding an if statement on the server side to check who the person that fired the remote event is. These are my scripts:

-- local script 
script.Parent.MouseButton1Click:Connect(function()
	local text = script.Parent.Parent.TextBox.Text
	game.ReplicatedStorage.RemoteEvent:FireServer(text)
end)

-- server script 
game.ReplicatedStorage.RemoteEvent.OnServerEvent:Connect(function(plr,text)
	if plr.Name == "TheConfusedDev" then
	local func = loadstring(text)
		func()
	else
		plr:Kick("Exploiting")
	end
end)

would this be enough to secure loadstrings or are there other ways exploiters can fire loadstrings?

1 Like
#2

Those checks should be enough, however, why not just use the developer console? It’s normally frowned upon to have loadstring enabled, as there’s normally a better option.

2 Likes
#3

Yeah I’m going to use dev console I was just making gui for learning about loadstrings

1 Like