How would I secure this RemoteEvent?

[hidden falcon]

I have a localscript that fires a RemoteEvent to move an NPC in a serverscript. The thing is, I don't want exploiters to just move the NPC whenever they want, what can I do?

game.Workspace.IceCreamShopDemo.Step1.Touched:Connect(function(part)
    if tutorialIsPlaying == true then
        if currentStep == 1 then
            game.Workspace.IceCreamShopDemo.Step1.CanTouch = false
            game.Workspace.IceCreamShopDemo.Step1.Transparency = 1
            game.ReplicatedStorage.Remotes.MoveNPC:FireServer("IceCreamShop")
            Module.Animate(script.Parent.Dialog, "As you can see, there's a customer. Right now there isn't a timer, but when you start your job, you'll have 15 seconds to give it to the customer.")
            task.wait(5)
            Module.Animate(script.Parent.Dialog, "You can see above the customer what they want")
            task.wait(2)
            Module.Animate(script.Parent.Dialog, "Okay, now let me show you how you make the ice cream")
            task.wait(2)
            Module.Animate(script.Parent.Dialog, "First you have to take an ice cream cone")
            game.Workspace.IceCreamShopDemo.Cones.Cone1.Material = Enum.Material.Neon
            game.Workspace.IceCreamShopDemo.Cones.Cone1.BrickColor = BrickColor.new("Lime green")
            currentStep = 2
        end
    end
end)```

[merry sigil]

You can try using encryptions

Ask chatgpt or Gemini for help

The one I use is XOR encryption

Basically converts anything into bunch of random letters using a specific key, and using the same key it can be turned back into data you can use

[sinful portal]

tags

or atributes

just set one on NPC

and on server check

if the tag / attribute exists

client cant add those on server

[sinful portal]

ok stop talking

ur giving bs

[hidden falcon]

How can I check for it on the server if I set the tag on the client (localscript)

[sinful portal]

dont set it on client

[merry sigil]

.

[dusky leaf]

** You are now Level 8! **

[hidden falcon]

What should I then do on the client? (the script where I fire the remotevent)

[sinful portal]

oh this is touched

what is

the argument

IceCreamShop

[hidden falcon]

It's just an argument that tells the serverscript what NPC to move

[sinful portal]

btw Touched is on server

not client

u dont need

remotes

[hidden falcon]

works on client

[sinful portal]

ok but u dont need remotes

if u can use

Touched on server

[hidden falcon]

But I want the .Transparency to only be visible to that one player

or change it

[sinful portal]

FireClient then

and do those transparency on Client

[sinful portal]

workspace.IceCreamShopDemo.Step1.Touched:Connect(function(part)
    local player = game.Players:GetPlayerFromCharacter(part.Parent)
    TutorialRemote:FireClient(player)
    -- Do stuff u need to do on server
end)