Should I do this on the server instead of the client to avoid exploiting problems?

So basically I’m using Teleport Data to send a player’s deck [of cards] using a dictionary. The first value of the dictionary is the name of the player who owns that deck. I check this on the client since I’m picking the teleport data up on the client. Should I verify the owner of the deck on the server instead to avoid exploits?

I’m pretty new to this anti-exploit stuff so I’d really appreciate some help. Thank you!

1 Like

Yeah, teleport data is can be easily tampered with.

1 Like

use datastoreService, places in Experiences have the same datastores.
with Experiences i mean games i say Experiences because :roblox: says it

1 Like

I don’t understand your English. Could you try to polish it up a bit?

He means that you can save the deck of cards in a DataStore instead of sending it with Teleport Data

1 Like

He said you should use datastoreService because all places in a game can acces the same datastores.

1 Like

This is a good idea. Instead of using teleport data, I can fetch the player’s equipped deck from a data store. I needed to make a equipped deck data store anyway. Thank you!