I don't have much network game programming experience, but an important thing is to have the server be able to doublecheck any action that the client tells it a player is doing. There was one MMORPG that didn't have any checks at all that was released professionally, and the client/server protocol was hacked within a matter of days after release.