Warning to Scripters: About Roblox' loadstring function

Join Date: 2009-01-19
Post Count: 6227

#133096716Thursday, May 08, 2014 9:03 PM GMT

I made this post in the Scripters forum as well, but not all scripters go in there and I believe the rest of the community should know about this as well On May 12th, Server-side loadstring() will be disabled by default. The LoadStringEnabled property will be removed from the Workspace, and will get moved over to the ServerScriptService. The property will be off by default, and will not be scriptable (It can still be set in studio though). The new property can be found inside of the ServerScriptService now. If you are using loadstring still, you need to think of a better implementation as soon as possible, and if all else fails, you can enable the property. There is no guarantee that loadstring will be around forever, and it may be disabled completely in the future with no way to bring it back (on the server side at least) You have about 4 days. Get moving ;)

ali119

Join Date: 2009-05-02
Post Count: 2417

#133096829Thursday, May 08, 2014 9:04 PM GMT

I'm gonna have t-? Oh crap.

Syntrosic

Join Date: 2013-10-26
Post Count: 1801

#133096867Thursday, May 08, 2014 9:05 PM GMT

Okay.

Spectrabox

Join Date: 2008-08-29
Post Count: 6888

#133096998Thursday, May 08, 2014 9:07 PM GMT

Are you referring to the LoadString of data persistence or the other one? If it is data persistence that will suck :/

legobotron

Join Date: 2011-03-17
Post Count: 2668

#133097145Thursday, May 08, 2014 9:08 PM GMT

What Spectrabox said

CloneTrooper1019

Join Date: 2009-01-19
Post Count: 6227

#133097435Thursday, May 08, 2014 9:12 PM GMT

@Spectrablox Nope, the loadstring function. Its an extremely useful function that can let you load code using a string. For instance: local lol_print = loadstring([[print("Lol")]]) lol_print() However, with great power comes great responsibility. Roblox has been cracking down on all of these Lua based server vulnerabilities, and because so many script builders/ admin commands have script commands, a hacker can just copy the script, change the string value to code they want to run and basically damage a game really badly. That's why they are forcing the property to false if it hasn't been set already, and the creator will have to take care of it. Yes it will break some old games that are no longer maintained, but in the long run this will be a lot better.

Deusific

Join Date: 2010-09-08
Post Count: 16151

#133097534Thursday, May 08, 2014 9:13 PM GMT

Lua confuses me