when doing MarketplaceService:PromptProductPurchase / PromptGamepassPurchase
some tutorials send a remote event to the server and send the prompt from the server
my question is, why do they not do it from the client?
like is it less performant or less secure or anything when doing PromptPurchase(game.Players.LocalPlayer, id)?
I think it may be because exploiters can access the client (might be wrong on this one) and also because i believe it’s better to have the server handle this so it can proccess if the player has the gamepass in a more trusted way
One thing I’ve always heard is “never trust the client”
There is no reason to do it on the server. It is the exact same thing and takes more time. There is no “security” risks that are involved. Also the client is literally sending a message to the server so they can be prompted back on the client. And the documentation says to prompt on the client.