System Security Question

I’m designing a quiz system that lets users pick options and depending on their score, it decides whether it promotes them or not. This is done with UI, so I’m sending a RemoteEvent server fire when the user finishes the application letting the server decide whether to promote them or not. My concern comes into the area when an exploiter joins and illegally fires the remote and gets promoted. How can I 100% prevent this?

are you having the application processed on the client? If so I would recommend moving the processing to the server, and then send the details using the remote event

The processing is done on the server

So, the questions are sent to the client, but the answers are left in the server, there is no way the client can see them. When a client sends his application, his answers, not matter what they were even if he was an exploiter and altered them, will be checked in the server, his score will exist in the server, and the promotion is decided on the server. I said server almost 5 times if you don’t include the last one, so there is 0 way the explotier will do anything (besides sending malformed data but that always happens) to make his chances of winning higher. Do everything on the server, the client just sends his answers, that way you should be fine.

2 Likes

Thank you for enlightening me on this. It makes a lot of logical sense explained this way.

1 Like