Backdoors and exploiters

[proven sapphire]

I have such a problem, every day I had exploiters with a powerful hack that used backdoor, it seems that I found and deleted backdoor, but today an exploit came to me that gave out millions to everyone and blew everyone up (Through gamepasses that I created on the server side), how is this possible? and how to make protection against this? when I disabled the script responsible for the gamepass, the attacks stopped.

I don't know what to do with these hackers anymore, I really don't have any ideas anymore.

[violet nexus]

Why TF are there multiple connections

Do it in one

[cyan burrow]

and why in the last u r getting player when u already got the player by the user id?

[proven sapphire]

wdym?

Oh

Fr

i just new in gamepasservice.

one sec

done

[cyan burrow]

huhh

how long ago u started in that game?

/ started deving

[violet nexus]

What is "is"

[cyan burrow]

is is purchased

a boolean that pass if the player buyed the gamepass or not

[violet nexus]

Oh

WAIT

You have to check the status of the purchase

[cyan burrow]

anyway roblox doesnt recommend that connection due to yeah exploiters lol

[violet nexus]

Don't check the third parameter @proven sapphire go watch a video on gamepasses

[proven sapphire]

i shouldnt check third parameter? because they can ex[loit it?

[proven sapphire]

I know what can be better and simpler, but it's nicer and more pleasing to the eye for me.. I've been coding for 2 years.

[violet nexus]

I'm not too sure how it works but I haven't seen that used too much

[proven sapphire]

oh yep

i deleted 3 par. and nothing changed

thanks

I mean, nothing's broken.

[violet nexus]

Oh uh

Now it'll do it even if you cancel

Which isn't ideal

[proven sapphire]

let me check

[violet nexus]

It's been a while since I've done anything gamepass related

[proven sapphire]

fact

[violet nexus]

Maybe try to get someone who knows how marketplace service works

But I don't see anything wrong really

And it shouldn't be exploitable because it's on the server

So unless you have a backdoor...

[proven sapphire]

yes in my game was backdoor

i deleted it i think

because

when i turn off gamepass server

exploiter gone

[violet nexus]

Oh

[proven sapphire]

also if i have another backdoor in game , idk how to find it , because i tried ctrl shift f and there only normal scripts

[violet nexus]

Wait is product purchase for gamepasses

Or for dev products

[proven sapphire]

dev product

[violet nexus]

Ah

[violet nexus]

OH

[crimson shoal]

Can somebody help me too?

[proven sapphire]

I'm talking with pro exploiter right now and he trying to find any issues in my game.

[violet nexus]

I KNEW IT

[proven sapphire]

?!?!?!?!??

wgat us itw

[violet nexus]

You're using the wrong parameters

[proven sapphire]

what is it

?!

[violet nexus]

Yeah

[proven sapphire]

?!

[violet nexus]

That's not how it works

https://create.roblox.com/docs/production/monetization/developer-products

[proven sapphire]

oh

[violet nexus]

Read this

[proven sapphire]

Ok,thanks i will read

[violet nexus]

Here's how you're supposed to do it

local MarketplaceService = game:GetService("MarketplaceService")
local Players = game:GetService("Players")

local productFunctions = {}

-- Product ID 123123 brings the user back to full health
productFunctions[123123] = function(receipt, player)
    local character = player.Character
    local humanoid = character and character:FindFirstChildWhichIsA("Humanoid")

    if humanoid then
        humanoid.Health = humanoid.MaxHealth
        -- Indicate a successful purchase
        return true
    end
end

-- Product ID 456456 awards 100 gold to the user
productFunctions[456456] = function(receipt, player)
    local leaderstats = player:FindFirstChild("leaderstats")
    local gold = leaderstats and leaderstats:FindFirstChild("Gold")

    if gold then
        gold.Value += 100
        return true
    end
end

local function processReceipt(receiptInfo)
    local userId = receiptInfo.PlayerId
    local productId = receiptInfo.ProductId

    local player = Players:GetPlayerByUserId(userId)
    if player then
        -- Get the handler function associated with the developer product ID and attempt to run it
        local handler = productFunctions[productId]
        local success, result = pcall(handler, receiptInfo, player)
        if success then
            -- The user has received their benefits
            -- Return "PurchaseGranted" to confirm the transaction
            return Enum.ProductPurchaseDecision.PurchaseGranted
        else
            warn("Failed to process receipt:", receiptInfo, result)
        end
    end

    -- The user's benefits couldn't be awarded
    -- Return "NotProcessedYet" to try again next time the user joins
    return Enum.ProductPurchaseDecision.NotProcessedYet
end

-- Set the callback; this can only be done once by one server-side script
MarketplaceService.ProcessReceipt = processReceipt

[proven sapphire]

This?

[violet nexus]

No

[crimson shoal]

ObSp

[proven sapphire]

Hmm o i will try

ok

thanks

[crimson shoal]

Can you please check out my problem too?

[violet nexus]

This

[proven sapphire]

hm its weird

[proven sapphire]

Also thanks alot , all working!

[violet nexus]

Cool!

[proven sapphire]

but idk why this error appears

[proven sapphire]

.

[violet nexus]

What's like 90

[proven sapphire]

What?

oh

there just says

[violet nexus]

The error appears at line 90

[proven sapphire]

that this string what i send with

this

[proven sapphire]

one sec

[violet nexus]

No need for the pcall really

Oh your error is that

The "player" parameter in your function is already a player object

[proven sapphire]

Change plrs to player?

[violet nexus]

In your 10068... Function

You're trying to get a player by user id

[proven sapphire]

OH

really

[violet nexus]

But the player parameter isn't the user id

[proven sapphire]

thans alot

[violet nexus]

It's the player

[proven sapphire]

yep its not user id , its object

i understand , I'm sorry for my inattention.

also thanks alot of help

[violet nexus]

All good

This should hopefully be fixed then lol

[fervent verge]

Rule number 1: Dont use free scripts

(Unless a sigma scripter made them)

[proven sapphire]

Hi

What this mean?

[violet nexus]

I have no clue lol

I know they're used for parallel but not much else