[coreys]

Yeah, I always use objects with variables reflected to clientr variables. But that can still be insecure, since, even if you refresh it everyone once in awhile, or whenever a change is made (what I do) someone can still set a clientr variable in a WNPC or level. But if you have a tight enough security with your staff (meaning you see everything made by your staff, including all level scripts, classes, DBNPCs and WNPCs) that shouldn't be a problem. I'm not entirely sure how hex editing or hacking works myself, I've never bothered to learn, so I don't know if that's a possibly way to abuse that "glitch" (of sorts) with clietr flags.