facebook user validation

I have an Iphone app. I am using facebook connect when for user authentication. I am sending score and fbuser Id to my web server. How can I valid开发者_StackOverflow中文版ation this user valid or not?

Thanks

If your user login to FB using your app, then you have his valid fb id.

If you get users' friends using FBConnect, then you also have theirs fb id. Then they are also valid, so what are you scared of when all the FB ID is returned from FB API?

This is an issue of game hacking. It's not possible to make a clientside score that can't be tampered with.

You can either:

• Try to thwart them by encrypting the score and FacebookId before it's sent to your webserver.
• Run the game on your webserver. The client only passes the players moves to the server.