Unsure of the safety of a model

[hearty tangle]

To give context I am brand new at developing and decided to build an obby to get familiar with the engine. I found this video (https://youtu.be/LDpMQ9WsUwo) that has a lot of what I'd like to build off of, but in the set-up tutorial they ask I turn on HTTP requests and third party purchases. I do not know what those are or why they would be needed for the obby, so I'm hoping someone more informed than me can clarify that and the general safety of the scripts included in the model. I hope this is the right place to post this question and thanks in advance to anyone willing to help! Here's the model as well. https://create.roblox.com/store/asset/140630477631657/Obby-Kit-By-JakeDev

[waxen marsh]

If you want to ”get familiar” with the roblox engine then making stuff yourself is and always will be the best way. As for the scripts part, I couldn’t tell you as I’m on mobile, there are however plenty of both legitimate and illegitimate reasons for why you’d need to enable both of those, but the only one I see needing to be used is ”Access to roblox api services”, to save the users data using datastores.

[hearty tangle]

Access to Roblox API services makes sense. Do you have any advice on why http requests and third party sales might need to be on? Those scare me more, especially with the warning that pops up when enabling and the little I found online about back doors

Also I do agree the best way to learn is to build it yourself, however with all the new things I'm working with, it is nice to see how stuff like data storage connects on a prebuilt one before I attempt one myself. I do plan to do so. I just want to clarify that the prebuilt one is quality so I can learn by seeing how the pieces connect.

[waxen marsh]

Usually HTTP requests are used for statistics or things such as webhooks, so unless the obby features any of those the chances are that you won’t need it. My best guess for the third party sales is that the obby creator wants people to not realize that any gamepass sales they get would go to him if he has made the gamepass script like that.

[waxen marsh]

Looking in the comments of the video you sent the creator himself also advices people to not use the system as he has made better, whether you want to believe that or not.

Me personally I wouldn’t use this model as there are many red flags associated with it, even at just a surface level, as you yourself have noticed.

[hearty tangle]

Gotcha that makes sense. I was worried about stuff like that. Thanks for the additional info on what http requests are used for

[hearty tangle]

I'm glad you see it as suspicious as well, I'll delete it

[deft fern]

** You are now Level 1! **

[pine junco]

this is fairly on-point. 3rd party sales means the owner of the kit gets all gamepass sales. and the http services could be for various things but most likely it's logging your game with the kit owner's discord or something like that.

probably just some analytics nothing too malicious

[hearty tangle]

Thank you 🫡🫡🫡

[pine junco]

but ya i'd turn off both and particularly those 3rd party sales

[hearty tangle]

I did also script a checkpoint system that worked with Roblox's built in leaderboard system that I am proud of. However I then wanted to make the levels that the leaderboard kept track of be displayed at the top of the screen using GUI elements which I assume means I need to use something else besides the leaderboard system to do? I've been looking through this model, and as bad as it seems to be in a lot of areas, seeing how they made the GUI elements work with a player's individual level storage has been helpful. Any advice on how to set something like that up myself? I believe that'll probably take some client-server boundary knowledge, which I've never worked with up until this point.

[pine junco]

client-server runtime is really simple. there is 1 server, and lots of clients, one for each person connected. when that clicks, the rest is easy https://create.roblox.com/docs/projects/client-server