Hello developers, I’m making this post to ask if it’s possible to make a RemoteEvent that only affects the player who ran it.
I’m stuck on how to make a spell/ability system that can’t be exploited easily such as infinite mana.
I’ve got an attribute on the humanoid which acts as the player’s mana value.
I’d appreciate any form of help with this as I’ve hit a roadblock due to this issue.
The player who called it is passed as the first argument, you can use that.
Is it possible for an exploiter to call the event as someone else?
I don’t want an exploiter to be able to take everyone’s mana constantly.
It is not possible to spoof that value, that value is created and handled only on the server. It is automatically known based on your IP, and to spoof it you would literally have to be somebody else.