<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>也别放弃基础 on PlumePHP</title><link>https://plumephp.com/tags/%E4%B9%9F%E5%88%AB%E6%94%BE%E5%BC%83%E5%9F%BA%E7%A1%80/</link><description>Recent content in 也别放弃基础 on PlumePHP</description><generator>Hugo</generator><language>zh-CN</language><lastBuildDate>Fri, 29 May 2026 19:12:00 +0800</lastBuildDate><atom:link href="https://plumephp.com/tags/%E4%B9%9F%E5%88%AB%E6%94%BE%E5%BC%83%E5%9F%BA%E7%A1%80/index.xml" rel="self" type="application/rss+xml"/><item><title>Godot 客户端自检信号：别把安全全押在前端，也别放弃基础 sanity check</title><link>https://plumephp.com/godot-client-sanity-checks-anti-tamper-2026/</link><pubDate>Fri, 29 May 2026 19:12:00 +0800</pubDate><guid>https://plumephp.com/godot-client-sanity-checks-anti-tamper-2026/</guid><description>&lt;p&gt;客户端安全有一个基本原则：不能把关键安全完全押在客户端。发奖、扣费、排行榜、匹配资格都应该由服务端权威判断。但这不代表客户端什么都不用做。客户端可以做基础 sanity check，发现资源版本不一致、配置被破坏、调试入口误开、运行环境异常，并把信号上报给服务端和日志系统。&lt;/p&gt;</description></item></channel></rss>