Search the Community

So I have a huge question that I just can't seem to find the answer to. A player has 5 characters they can move across the board. Each character has their own movement allowance (some can only move 1 square per turn while others can move 2 or 4). The player has a TOTAL of 5 moves per turn. So they can move their characters 5 squares however they please. My question is, after every turn, I want to make a database call to track their position so in case if they refresh the browser or come back to the game later, their characters are in the same position. If I store this information in localStorage, can't they just update their character's position manually and potentially move a character that can only move 1 square up to 10 if they please? I don't know how to secure this without making a database call EVERY TIME they click a square which would be way too many requests and could slow the game down a LOT, right? And when the character moves, I'll be doing a check that looks similar to: if (path.length > character.movement_allowance) { // Then don't allow them to move } Couldn't they just update it to 10 via dev tools if they wanted to? My players object will look similar to this: players: { 0: { name: 'Red Fox', movement_allowance: 2, pos_x: 2, pos_y: 3 } } Couldn't they just update their x and y position? And even their movement_allowance? I'm just out of ideas here unless I check the server side every time they move to make sure it's correct and validate it..

I would like to prevent players from switching to any game state by typing "game.state.start('name');" into the console. Has anyone found a way to prevent this from happening? Imagine you have a login-screen and any user can just type "game.state.start('play');" into the console and skip straight into the game. I have already tried using anonymous functions and closures but the problem is that the other states such as BootState, MenuState, GameState etc cannot access the game object created from new Phaser.game. I cannot be the only one who's worried that users can simply skip any game state by typing one line into the console. How have others dealt with this security breach? I tried googling but couldn't find any posts about this whatsoever. Thanks in advance for all answers!