[Admins]

If someone knows hacking working methods then report them via forum pm.
The script variables are usually quite secure on clientside, but you should never rely on them. It can never be prevented that something is sent/received incorrectly or some bugged script is setting a variable to a wrong value, so do only things on the server which cannot go wrong even if there is bad input from the clientside.
(Bad input means: client. vars being edited, invalid triggers being sent)