|
| 11 Mar 2017 05:46 PM |
I was looking at PF's code to see how they set up some of their gun things and I noticed that there is a RemoteEvent function that allows a local script to change the health of another player called ChangeHealth. So basically, the local script detects raycast collision and tells the server to deal damage to the player that's been hit.
Why is it set up this way and isn't it very vulnerable to hackers as they can just tell the RemoteEvent to damage all the other Players in the server? |
|
|
| Report Abuse |
|
|
|
| 11 Mar 2017 05:47 PM |
theres probably something on the server
|
|
|
| Report Abuse |
|
|
devHoodie
|
  |
| Joined: 04 Nov 2008 |
| Total Posts: 30332 |
|
|
| 11 Mar 2017 05:47 PM |
Only if you know the code and the name of the RemoteEvent and all that.
-- Former AKA : luis15232 |
|
|
| Report Abuse |
|
|
|
| 11 Mar 2017 05:48 PM |
No, I checked the server script. When the RemoteEvent is triggered, it just calls a function called SetHealth. |
|
|
| Report Abuse |
|
|
| |
|
devHoodie
|
  |
| Joined: 04 Nov 2008 |
| Total Posts: 30332 |
|
|
| 11 Mar 2017 05:50 PM |
Well that's why I handle damage and creation on server side.
Example: https://www.roblox.com/games/677879709/FrameWorkGuns
-- Former AKA : luis15232 |
|
|
| Report Abuse |
|
|
|
| 11 Mar 2017 05:52 PM |
^ The problem with that there is latency lag. So sometimes when the player thinks he/she hit another player, that player isn't damaged. |
|
|
| Report Abuse |
|
|
devHoodie
|
  |
| Joined: 04 Nov 2008 |
| Total Posts: 30332 |
|
|
| 11 Mar 2017 05:53 PM |
That's how actual games prevent *some* hacking though
-- Former AKA : luis15232 |
|
|
| Report Abuse |
|
|
|
| 11 Mar 2017 06:05 PM |
| Well if PF is set up this way, why isn't it hacked more? |
|
|
| Report Abuse |
|
|
|
| 11 Mar 2017 06:07 PM |
go try hacking it and seeing if it works
|
|
|
| Report Abuse |
|
|
reezy24
|
  |
| Joined: 16 Oct 2016 |
| Total Posts: 115 |
|
|
| 11 Mar 2017 06:09 PM |
| they have countermeasures other than simply FE. |
|
|
| Report Abuse |
|
|
|
| 11 Mar 2017 06:21 PM |
| @Disilluions, I don't know ### ## ##### but if someone were to tell me how to trigger a RemoteEvent, I would easily be able to continuously kill all the other players in the server. @reezy, Probably, but it doesn't seem like they have any counter measures to the damage function. |
|
|
| Report Abuse |
|
|
| |
|
GGGGG14
|
  |
| Joined: 29 Jan 2012 |
| Total Posts: 25344 |
|
|
| 11 Mar 2017 06:28 PM |
| They probably have a server queue that validates that the person is actually shooting when the RemoteEvent is fired. |
|
|
| Report Abuse |
|
|
|
| 11 Mar 2017 06:33 PM |
| But what if it's a single shot weapon? |
|
|
| Report Abuse |
|
|
fret13103
|
  |
| Joined: 15 Mar 2010 |
| Total Posts: 881 |
|
|
| 11 Mar 2017 06:50 PM |
| if u can be asked to get around roblox anti debug to find the function for the remoteevent, injecting a DLL and then calling the func with the correct args (easy since u have the source) then sure, you can abuse phantom forces. |
|
|
| Report Abuse |
|
|
TimeTicks
|
  |
| Joined: 27 Apr 2011 |
| Total Posts: 27115 |
|
|
| 11 Mar 2017 07:00 PM |
you verify the change on the server and on the client.
this is normal in games like raycasting on both the client and the server and comparing the two
|
|
|
| Report Abuse |
|
|
|
| 11 Mar 2017 08:13 PM |
| But on the server, there are no raycasts taking place. |
|
|
| Report Abuse |
|
|