Anti-exploit

[old swift]

you cant really detect when they inject scripts

you have to just have checks on the server that prevent what they are doing

im not too experienced in anticheat development but u can watch some of these videos to get a better understanding:
https://www.youtube.com/watch?v=SFAwwmb8G6o
https://www.youtube.com/watch?v=hr_8svt1n1E

[old swift]

you cant check walkspeed on the server

because exploiters can set their walkspeed to 100 on the client

and the server will still think their walkspeed is 16 (default walkspeed)

There are a few ways to do checks to prevent people from setting their walkspeed very high though (DO THIS ON SERVER SCRIPT):

1. Run a while true loop and just set every player's walkspeed to 16 forever.
2. Continuously check the player's humanoid root part position. So if the player is at (0,0,0) and then the next second they are at (100,0,0) then you know that something might be wrong and you could teleport the player back to their old position or something like that

there is probably more ways but im not experienced in anti cheat so these are just the ways I know

[sage stag]

to note with that first solution, if the value hasnt changed on the server it wont tell the client about the assignment, so you have to set it to something slightly different then back to 16 for it to work

[old swift]

oh okay

so set it to like +0.01 then -0.01

[sage stag]

yeah

[sage stag]

tbh trying to make anticheats to this degree is a lot of the time fighting a losing battle
speed exploits are not easy to detect or prevent without countless false positives and/or harming the user experience by them feeling like theyre rubber banding

your focus should probably be more on making sure that speed doesnt give them a competitive advantage, or implementing ways to moderate things manually instead of trying to automate everything

[jovial finch]

only way to check walkspeed on server is constantly seeing the amount of change in distance from previous position in a loop

not checking actual properties

only way to win is by patching common scripts which skids use, and hope competent exploiters don't find the game. That's if their only using inf yield, etc.

[pure dragon]

i have a weird approach to this but im not sure if its correct

in my game u can move at crazy speeds when ur sliding around or exploded and since its a movement i dont want it to have input delay so as to keep it as smooth as possible

what i do is i keep track of their positions on the server and then when i see a crazy change in position like this i log it and then wait for a remote event on the server (mines named "Movement")

if the remote event does not happen in a certain amount of time i then position them back

[jovial finch]

good solution as long as you detect the movement event isn't being constantly fired

[pure dragon]

its fired at a maximum rate of 4 seconds per player

thats the slide cd time

[jovial finch]

does it check on server if its fired before 4 seconds?

good way to allow fast speed

[pure dragon]

wait i dont understand

[jovial finch]

I'm saying the exploiter can constantly fire it to avoid being detected by AC

[pure dragon]

BRO I DIDNT CHECK FOR THAT

UR RIGHT

OOPS

[jovial finch]

I would just do a check between remote firing times, and if the remote is being fired under ~2-3 seconds apart more then 10+ times then you can flag them for possible remote manipulation

[pure dragon]

currently i just check like this

server detects big speed ----> expects response within a certain time frame ----> if no response then reset pos

[pure dragon]

yeah i forgot to include this

it should only be possible to fire that remote every 4 seconds at maximum per player for me

oops

but im not sure if this is the best way this is what i do; u can alternatively have ur humanoids and stuff on the server and handle visuals on the client

if u are interested on that u might want to look into chickenoid or something its called

[jovial finch]

u mean giving humanoids network ownership to server ?

[pure dragon]

theres this custom humanoid called chickynoid its not giving owership over to the server but its server authorative what that means is the server corrects ur inputs

[jovial finch]

oh I see

[pure dragon]

so if u press w and u are at position 10,0,0 in ur client but at the server u are at 5,0,0 then the server will put u back at 5,0,0