Hey!
I’ve been doing some work on one of my games, and I’m using a remoteEvent to tell the server whenever the players used an ability, so the server can then do whatever it has to do.
It’s all going well, however I’m doing this because I want my game to be protected from exploiters. Here’s my problem though: can an exploiter go into my code and change arguments from what I’m firing from the remoteEvent? Obviously, this would only be client sided, meaning only they’d be able to do it to themselves, but what I’m worried about is the exploiter firing one of the developer remotes, basically giving them access to developer abilities.
My question is as such: can an exploiter change what a remote fires, and what do exploiters actually have power over? Can they change everything within a local script? Or just things like their mouse position, and their player position?