Implementing security
We already know a lot about the client and the server. We know both their purposes and how to communicate between them. Unfortunately, there are always people trying to ruin the fun by trying to take over your game or exploit it. We already learned how FilteringEnabled prevents a lot of these exploits. However, it cannot stop everything.
So, what can exploiters still do? They are still in control of everything that happens to their own character. Fortunately, this is only the case with their character; they cannot change anything for the characters of other players. The reason for this is because of the network ownership that was explained in the Replication exceptions to FilteringEnabled section.
Besides manipulating their own character, exploiters can do anything that we can do with our LocalScripts. Exploiters basically “inject” a malicious piece of code into the game. Because this is done on their own computer, this is a client-side script...