Roblox RemoteEvent validator generator

Exploiters can fire any RemoteEvent with any arguments. Describe what your remote should receive, and get the server-side Luau that rejects everything else: wrong types, out-of-range numbers, NaN, huge strings, fake objects and spam.

Runs entirely in your browser. The generated pattern is tested against 20+ malicious inputs in the real Luau runtime. Background: never trust the client.

What the generated code does

• Treats every client value as unknown and checks its type with typeof() before touching it.
• Numbers: rejects NaN and infinity (both pass naive </> checks), enforces min/max and whole numbers if needed.
• Strings: rejects empty and over-long values. "Choice" only accepts the listed values.
• Vector3: rejects NaN components and, optionally, positions too far away. Instances: checks the class and that the object is still in the world.
• Optional per-player rate limit, with cleanup when players leave (no memory leak).
• Only then calls handle(...) with properly typed values. That's where your logic goes.

Still your job

• Never accept values the server can work out itself: prices, damage, rewards. Look them up on the server.
• Check server state inside handle(): does the player own it, can they afford it, are they close enough?
• RemoteFunctions need the same checks, and never call InvokeClient from the server and wait on it.