generic image
Processing...
  • Games
  • Catalog
  • Develop
  • Robux
  • Search in Players
  • Search in Games
  • Search in Catalog
  • Search in Groups
  • Search in Library
  • Log In
  • Sign Up
  • Games
  • Catalog
  • Develop
  • Robux
   
ROBLOX Forum » Game Creation and Development » Game Design
Home Search
 

Re: Client-To-Server w/ FilteringEnabled

Previous Thread :: Next Thread 
IthacaMedia1 is not online. IthacaMedia1
Joined: 25 Jan 2014
Total Posts: 70
27 Jan 2016 10:53 AM
I have a mini-gui game within the game where you can get points. However, this makes an exploit possible with FilteringEnabled, as the client sends to the server. How can I fix this?


Report Abuse
fixylol is not online. fixylol
Joined: 14 Dec 2012
Total Posts: 7412
27 Jan 2016 10:55 AM
you can use remoteevents and remotefunctions to share info between the client and the server

Number of times opinion has changed: A lot.
Report Abuse
chimmihc is not online. chimmihc
Joined: 01 Sep 2014
Total Posts: 17143
27 Jan 2016 11:04 AM
You can:

A. Not have that game.
B. Have the setup like this:

Client -> Ask for points -> Server checks the info given and if it seams legit, gives points


Report Abuse
LongKillKreations is not online. LongKillKreations
Joined: 14 Feb 2014
Total Posts: 4502
27 Jan 2016 02:27 PM
ask in the scripters forum next time

So unless I'm mistaken, you're trusting the data the client sends when they say they want to modify points or what not. This is the wrong way to approach things; instead, the client should be relaying input (i.e user wants to buy an item), and then the server runs checks to make sure the request is legit (user can afford the item, etc).

Don't trust the data the client sends if you're modifying important data, and don't handle sensitive data on the client.
Report Abuse
LilMcManiac is online. LilMcManiac
Joined: 31 Oct 2011
Total Posts: 2812
27 Jan 2016 03:15 PM
^ Precisely

Okay, well yeah don't hold any precious data within' the client.
That is the whole reason of FE, to prevent local scripts from communicating with the server; so if you hold any server data, within' the client. Then there are still some possible exploits. Just hold your data in the server. Or, you can just have the server check the data, and see if it is reasonable. Like someone above said.
Report Abuse
LongKillKreations is not online. LongKillKreations
Joined: 14 Feb 2014
Total Posts: 4502
27 Jan 2016 03:24 PM
Handling sensitive data client-side is pretty much giving someone keys to your network.
Report Abuse
litalela is not online. litalela
Joined: 30 Mar 2010
Total Posts: 6267
27 Jan 2016 03:36 PM
longkill is copying rayk's old look

gg

➳Lɪᴛᴀʟᴇʟᴀ ɪs ᴍʏ ɴᴀᴍᴇ, Lᴜᴀ ɪs ᴍʏ ɢᴀᴍᴇツ
Report Abuse
LongKillKreations is not online. LongKillKreations
Joined: 14 Feb 2014
Total Posts: 4502
27 Jan 2016 03:45 PM
i prefer the term "taking revenge for being a meanie"

get it?
revenge?
ray revenge?
no?
ugh
Report Abuse
IthacaMedia1 is not online. IthacaMedia1
Joined: 25 Jan 2014
Total Posts: 70
28 Jan 2016 12:21 AM
"Client -> Ask for points -> Server checks the info given and if it seams legit, gives points"

Ok thanks, but the issue I'm having is how do you check if the info is valid since it's a number anyways.


Report Abuse
chimmihc is not online. chimmihc
Joined: 01 Sep 2014
Total Posts: 17143
28 Jan 2016 01:35 AM
So you are pretty much telling the server how many points to add. Don't do that.

Give the server the data of the game, process that.


Report Abuse
IthacaMedia1 is not online. IthacaMedia1
Joined: 25 Jan 2014
Total Posts: 70
31 Jan 2016 08:33 PM
Like when they do whatever is needed in the client gui to get the points, have the server add the points?
Report Abuse
IthacaMedia1 is not online. IthacaMedia1
Joined: 25 Jan 2014
Total Posts: 70
07 Feb 2016 09:48 PM
But then they can still do whatever the client did to communicate to the server to get the points :P. Can someone give me a code sample of how to do this? Thanks.
Report Abuse
LilMcManiac is online. LilMcManiac
Joined: 31 Oct 2011
Total Posts: 2812
07 Feb 2016 10:12 PM
--

Client --> Wins Round --> Server checks for winners --> Server gives points to client
Report Abuse
IthacaMedia1 is not online. IthacaMedia1
Joined: 25 Jan 2014
Total Posts: 70
16 Feb 2016 06:53 PM
Ok, the specific issue I'm having is I want the player to get points when they click something, but since the action (clicking) is done purely on the client end, I'm not sure how to make this secure.
Report Abuse
IthacaMedia1 is not online. IthacaMedia1
Joined: 25 Jan 2014
Total Posts: 70
19 Feb 2016 09:28 PM
Still not sure because if I keep track of the points on the server, the clients clicks are still telling the server to add the points, making the game exploitable :(.
Report Abuse
IthacaMedia1 is not online. IthacaMedia1
Joined: 25 Jan 2014
Total Posts: 70
25 Feb 2016 08:16 PM
Any way around this?
Report Abuse
LilMcManiac is online. LilMcManiac
Joined: 31 Oct 2011
Total Posts: 2812
25 Feb 2016 09:46 PM
Have a intValue in the workspace, or somewhere. Then when the client clicks have the client go to that intValue, and take the points from it.
Report Abuse
IthacaMedia1 is not online. IthacaMedia1
Joined: 25 Jan 2014
Total Posts: 70
26 Feb 2016 11:01 PM
Yeah but I want the points to go up when they click, so not just read, but write. The issue is since the client does the clicking, it's exploitable. I can't seem to find a way around this :P.
Report Abuse
IthacaMedia1 is not online. IthacaMedia1
Joined: 25 Jan 2014
Total Posts: 70
27 Feb 2016 10:06 PM
This is more confusing than I thought... Am I missing something? Lol.
Report Abuse
IthacaMedia1 is not online. IthacaMedia1
Joined: 25 Jan 2014
Total Posts: 70
29 Feb 2016 10:13 PM
Bump of unanswered doom :(
Report Abuse
Previous Thread :: Next Thread 
Page 1 of 1
 
 
ROBLOX Forum » Game Creation and Development » Game Design
   
 
   
  • About Us
  • Jobs
  • Blog
  • Parents
  • Help
  • Terms
  • Privacy

©2017 Roblox Corporation. Roblox, the Roblox logo, Robux, Bloxy, and Powering Imagination are among our registered and unregistered trademarks in the U.S. and other countries.



Progress
Starting Roblox...
Connecting to Players...
R R

Roblox is now loading. Get ready to play!

R R

You're moments away from getting into the game!

Click here for help

Check Remember my choice and click Launch Application in the dialog box above to join games faster in the future!

Gameplay sponsored by:
Loading 0% - Starting game...
Get more with Builders Club! Join Builders Club
Choose Your Avatar
I have an account
generic image