I built a multiplayer fighting game with *impactjs, socket.io* and *nodejs* and faced with "change variables hack" (I want to call it like this). All my current logic with jump, running, shoot etc. is running on frontend, socket and nodejs just for creating a room.

How can I protect against a cheater changing variables on the client?

If you can share with code loke this it will be great :)