Client can't apply damage to server

Damage is server only functionality. Your client should call RPC to server if you want to deal damage based on client data, which is bad idea btw.