Prevent client from changing tags

[kboy100]

This thread and this article will assist you. Basically, never trust the client and implement server-sided checks.

@theepicgdog

Yeah, the tag doesn’t change, but the problem with checking the tag is that my framework clones a client version of the object then puts the tag on (on the client).

I assume you are using the Collection Service. As far as I am aware, if the cloned object has already been tagged then there is no reason to tag it again.

I found this post:

@colbert2677

Standard replication rules apply. The client cannot propagate changes to the server, so the server will not see tags that the client adds to objects. Likewise, a client’s tags on an object will get overwritten if the server modifies the tags for said object. Remotes are required, or a change in approach.

Which would imply that you should have no issues with exploiters.
Check out this article about the Client-Server Model.