Player Data Saving

Player Data Saving

In FlowVR, all player data (username, color, cosmetics) is saved and loaded through Unity's PlayerPrefs.
This is extremely unsecure and all values can be modified by hackers/skids.

If someone were to get the index of a cosmetic in your game, they could manipulate PlayerPrefs to have a value of that cosmetic of enabled, while they don't actually own that cosmetic at all.
A way to prevent this is using PlayFab for your game's economy, and checking that the player's inventory contains the cosmetic they're trying to equip.