7 ms·
Just curious, are there any good practices that would minimize the damage?
by why-el 15y ago
Just curious, are there any good practices that would minimize the damage?
- YmMot 15y agoDon't trust the game client.
- naeem 15y agoJust store it on the server. There was no reason for inventory information to be hosted client-side. If the data was stored on the server and fed real-time you wouldn't have the security issue. What you WOULD have is latency issues, which is the primary issue with Node-based games (from my own experience), so that's probably why they avoided it. In a real game, that's how you'd have to do it.
- troygoode 15y agoThe reason it is stored client-side is that it is just a demo app - there is no login, no truly persistent characters (I can't play the character I started at work from home), and no PvP.
- DasIch 15y agoYou just have to validate everything on the server.