I have a stamina system implemented locally. I’m planning to add abilities that consume a certain amount of stamina. However, I’m concerned about potential exploits: expoilters could send fake data to the server and avoid losing stamina.
My questions are:
Should I implement stamina as an attribute or as a value, and base my calculations on it?
Should I validate and update stamina on the server, and if so, what is the proper way to do it?
Don’t validate stamina, Stamina doesn’t affect the state of the world, only how the client wants to move, nor does it give any advantage to the cheater
Use an Attribute for stamina, update it only on the server, and validate any ability usage there. Clients just request actions and show the value.. never trust client-side changes.