Hacker News Reader

.. Or sending the action "deal 1000 damage" when the maximum damage any weapon can do is 5

You can't send an action "deal 1000 damage." The client says "shoot in that direction" the server determines what damage, if any, occurs.

Unless you're playing The Division (putting things like RPM, recoil, and player location client side).