Webhooks

Discord webhook URLs are stored in server.config.lua — a server-only file that clients never receive. Leave any entry as an empty string to disable logging for that event.

ServerConfig.Webhooks = {
  Deposit     = 'https://discord.com/api/webhooks/...',
  Withdraw    = 'https://discord.com/api/webhooks/...',
  Transfer    = 'https://discord.com/api/webhooks/...',
  CardFreeze  = '',
  CardPin     = '',
  AccountPin  = '',
  Iban        = '',
  OrderCard   = '',
  Loan        = '',
  LoanPayment = '',
}

ServerConfig.WebhookUsername = 'AlpyBank'
ServerConfig.WebhookAvatar   = ''

Server-side security

• Rate limiting per player per action (e.g. max 10 deposits per 30 seconds)
• All amounts re-validated against Config.Min/MaxTransactionAmount
• Balances read from framework after every operation — clients cannot spoof balances
• IBAN uniqueness enforced at the database level