In reference to DDOS protection, that should be held via your server provider and I would check with them, in reference to being hacked w/ players gaining roles and such. I’d advise you to consider using things such as what is linked below.