Safe to let user write to storage?

[gruset]

Hi there!

Im curious if its safe to let the user store data into the storage engine from the client? At the moment im using rpc to validate everything on the server, but maybe this is overkill? For instance, creating a friend list and the user sends in what entity id it wants to add to friend list. This could easily be done on the client, but then the player could send whatever they want into that record.

cheers

[flavio]

Hello @gruset,

In general, receiving any type and quantity of data could lead to problems. The bigger the amount, the more time it takes to retrieve the data, which would result in more resource usage for example. Additionally, bad actors could maybe use your storage for other unintended uses. It all depends on how relaxed the logic is.