More work needs to be on the server side.

A ton of cheating can be stopped dead in it's tracks if you spend some time filtering out data being sent to the clients, that have no business knowing about.