See, the wild thing is that I used to run with some actual hackers in GMod... and... I learned from the exploits that they did, how you actually design at least a game mode script that can't be fucked, can't be poked proded or queried directly.

Of course, if the actual exploit is lower level than what I'm writing at, well then I'm still fucked...

I can remember at least one GMod originated, lower level exploit, caused by Garry leaving some direct, unsanitized interface to Steam itself directly exposed via lua... which caused Steam/Valve themselves to step in and rewrite a part of all of Steam, because Garry is s fucking moron, and more or less allowed a virus/malware to propogate through Steam itself, independent of Garry's Mod...

Never did figure out if any of the goobers I knew had any direct ties to that or not.

But anyway, fucking yes, literally never trust the client with anything beyond their own GUI, and barely trust them with that, don't just let them click on anything in their screen space to see if its an item they can put in their inventory, do an actual server side vector ray trace, from the item to the playet, make sure the thing they clicked on is actually near them, put that all into a buffer that locks up if they're calling it at inhuman rates...

It was so easy to item dupe and stat boost and even hijack other players accounts in so many gamemodes I saw.

Fucking one of them had the user set and enter a login password to 'access' their various characters, pick one to spawn as.

Problem?

... That gamemode was actually doing the id check via SteamID, duh.

The username/password thing was a fucking phishing scam, that game mode had a forum, everyone used the same user names, a bunch of people got their hotmails or whatever fucked, by the dev of that gamemode.

... Anyway... yeah, I learned all this infosec type shit first hand, in an earlier 'FacePunch Studios' production.

Fuck Garry, fuck FacePunch, these people are idiot clowns.

Roblox exists now, the GMod roleplay communities independently invented their own ways of monetizing their gamemodes via syncing to their sites and forums with payoal widgets, ya'll missed the boat on that one, no one is going to play S&ndbox in anything close to GMod in its heyday numbers.