client does collision detection for the controlled player but nothing else...the rest - creatures, NPCs, etc.- is handled by the server and that's the majority of work...world of wacraft does this in the same way, one cannot trust the client to respond with correct data when the server asks it something so the best approach is to not to ask it anything at all....