Post: #2

The 1st rule of security is implement all security checks at server-side and never trust on what comes from client-side

You can find if this client have some specific encrypt key to enable this key on spherecrypt.ini and disable all others keys, but this can be easily faked using some client launcher that can report to server an fake client version with fake encryption key

You can also check if this client send some specific packet to server to report that it's an "orion client" but this also can be easily faked if someone find the packet number to send it manually using any other client

So unfortunately the best way to keep your server secure is using the latest sphere version with latest security fixes to keep it safe at server-side level