should i do the buy gamepass script on server side or on client side?
It uses marketplaceservice which is safe from exploiters.
iik but should i use the " PromptGamePassPurchaseFinished" on server side or on client side
Well it doesn’t really matter, because the code inside that gives them the gamepass or product can only be accessed from the PrompGamePass and not from exploiters. I’d use it on client side though.
Canonically, you should be prompting purchases from the client and the server can if it needs to. As far as using the prompt finished events, they can also be used by both the server and the client, your needs will change depending on what exactly it is you’re doing.
Since your thread is vague about what specifically you’re doing and is just a Q&A, can’t exactly give a proper answer as to “should this be client-sided or server-sided”.
Exploiters are a non-concern at all here as far as internals go and it’s up to your code from there. Knowing what exactly you’re using these events for would help better say where it should be done from.