diff --git a/_server/data.comment.js b/_server/data.comment.js
index 66260dbc..1db6fca7 100644
--- a/_server/data.comment.js
+++ b/_server/data.comment.js
@@ -340,6 +340,12 @@ data_comment_c456ea59_6018_45ef_8bcc_211a24c627dc =
                     "_type": "textarea",
                     "_data": "仇恨属性中，每杀死一个怪物获得的仇恨值"
                 },
+                "maxValidHp": {
+                    "_leaf": true,
+                    "_type": "textarea",
+                    "_range": "thiseval==null||thiseval>0",
+                    "_data": "最大合法生命值；如果此项不为null且用户通关血量超过本值，则视为作弊，不上传成绩"
+                },
                 "animateSpeed": {
                     "_leaf": true,
                     "_type": "textarea",
diff --git a/libs/events.js b/libs/events.js
index cc6882c8..e611fbb3 100644
--- a/libs/events.js
+++ b/libs/events.js
@@ -166,7 +166,8 @@ events.prototype.gameOver = function (ending, fromReplay) {
         }
 
         var doUpload = function(username) {
-            if (username==null) username="";
+            var hp = core.status.hero.hp;
+            if (username==undefined) hp = 1;
 
             // upload
             var formData = new FormData();
@@ -175,10 +176,10 @@ events.prototype.gameOver = function (ending, fromReplay) {
             formData.append('version', core.firstData.version);
             formData.append('platform', core.platform.isPC?"PC":core.platform.isAndroid?"Android":core.platform.isIOS?"iOS":"");
             formData.append('hard', core.status.hard);
-            formData.append('username', username);
+            formData.append('username', username||"");
             formData.append('ending', ending);
             formData.append('lv', core.status.hero.lv);
-            formData.append('hp', core.status.hero.hp);
+            formData.append('hp', hp);
             formData.append('atk', core.status.hero.atk);
             formData.append('def', core.status.hero.def);
             formData.append('mdef', core.status.hero.mdef);
@@ -198,7 +199,7 @@ events.prototype.gameOver = function (ending, fromReplay) {
         core.ui.drawConfirmBox("你想记录你的ID和成绩吗？", function () {
             doUpload(prompt("请输入你的ID："));
         }, function () {
-            doUpload("");
+            doUpload(undefined);
         })
 
         return;
@@ -210,7 +211,16 @@ events.prototype.gameOver = function (ending, fromReplay) {
         });
     }
     else {
-        confirmUpload();
+
+        if (core.isset(core.values.maxValidHp) && core.status.hero.hp>core.values.maxValidHp) {
+            core.drawText("作弊可耻！", function () {
+                core.restart();
+            });
+        }
+        else {
+            confirmUpload();
+        }
+
     }
 
 }
diff --git a/更新说明.txt b/更新说明.txt
index cc5a5c91..99eaf322 100644
--- a/更新说明.txt
+++ b/更新说明.txt
@@ -8,7 +8,7 @@
 图片移动事件
 事件：设置BGM音量  √
 提供core.rand()和core.rand2()两个随机数函数  √
-作弊处理
+作弊处理  √
 状态栏绘制
 六倍速播放  √
 播放视频时可以C键查看怪物手册  √