Blocked ConCommands
This is a list of all concommands and convars blacklisted from being ran or changed with RunConsoleCommand, game.ConsoleCommand and Player:ConCommand. Server and clients can still run the commands normally from console. Certain console commands have been disabled for a variety of reasons, usually to prevent harm or annoyance to players, such as unbinding all their keys using unbindall.
When you attempt to run RunConsoleCommand with a blocked command, this error will be thrown in console: RunConsoleCommand: Command is blocked! (<command name>).
Running Player:ConCommand with a blocked command will throw red text in console: ConCommand blocked! (<command name>).
Running game.ConsoleCommand with a blocked command will throw red text in console: game.ConsoleCommand blocked! (<command name>).
| Name | Reason |
|---|---|
crosshair_setup |
Could change the client's crosshair configuration without consent. |
__screenshot_internal |
Now-removed command that in the past could create a screenshot without the client's consent. |
_restart |
Blocked only client-side. Could crash the player's game. |
alias |
Could alias commands without the client's consent. |
askconnect_accept |
Could accept a redirect request without the client wanting to be redirected. |
bind |
Could be used to rebind keys without the client's consent. |
bind_mac |
Could be used to rebind keys without the client's consent. |
bindtoggle |
Could be used to rebind keys without the client's consent. |
buildcubemaps |
Could rebuild the cubemaps on a server, which can cause errors. |
building_cubemaps |
|
cef_credits |
Could open big count of webpanels. |
cl_allowdownload |
Could change the download settings without the client wanting to. |
cl_allowupload |
Could change the uploads settings without the client wanting to. |
cl_chatfilters |
Could change the chat filter settings without the client wanting to. |
cl_cloud_settings |
Could change the cloud settings without the client wanting to. |
cl_downloadfilter |
Could change which files can be downloaded from the server without the client consent. |
cl_enable_loadingurl |
Could enable/disable custom loading screens provided by joined servers without the client wanting to. |
cl_logofile |
Could choose spray file without the client wanting to. |
cl_mouseenable |
Could enable or disable the mouse without the client wanting to. |
cl_software_cursor |
Could replace the cursor with missing material (this makes the cursor invisible). |
cl_playerspraydisable |
Persists across sessions, use the GM:PlayerSpray hook or sv_allowupload 0 to disable sprays. |
clear |
Could clear the console without the client's consent. |
con_enable |
Could enable or disable the console. |
con_filter_dupe |
Could modify console filtering settings without the client wanting to. |
con_filter_enable |
Could modify console filtering settings without the client wanting to. |
con_filter_text |
Could modify console filtering settings without the client wanting to. |
con_filter_text_out |
Could modify console filtering settings without the client wanting to. |
con_logfile |
Now-removed convar that in the past could enable/disable writing console output to a file. |
connect |
Could connect to specified server without the client's consent. |
crosshair |
Could enable or disable the crosshair without the client's consent. |
devshots_screenshot |
Could create a screenshot without the client's consent. |
debug_dump |
|
developer |
Allows you to show or hide the player console details at the top left of the player screen. |
echo |
Could be used to print fake console messages. |
ent_fire |
Could let clients manipulate entities more than expected. |
ent_setname |
Could let clients manipulate entities more than expected. |
exec |
Could allow the client to execute malicious scripts. |
exit |
Could exit the client's game entirely. |
fov_desired |
|
fps_max |
|
gamemode_reload |
Now-removed command. |
gamemode_reload_cl |
Now-removed command. |
gameui_hide |
Could hide the game UI when the client didn't request to. |
gameui_preventescapetoshow |
Could stop the client from opening the game UI. |
gameui_show_dialog |
Could show an arbitrary dialog that crashes the game. |
gm_video |
Could recording of a .webm when the client didn't request to. |
gmod_language |
Could change the clients language without the client wanting it. |
gmod_tos |
Could open Facepunch's Terms of Service when the client didn't request to. |
gmod_privacy |
Could open Facepunch's Privacy Policy when the client didn't request to. |
gmod_modding |
Could open Facepunch's Modding guidelines when the client didn't request to. |
gmod_servers |
Could open the Server Operator rules when the client didn't request to. |
gmod_delete_temp_files |
Could modify temporary file settings without the client wanting to. |
hideconsole |
Could hide the console when the client didn't request to. |
host_writeconfig |
Could save the current config settings to the registry (which could cause changes to be saved without the client wanting them). |
hud_fastswitch |
Could enable/disable fast weapons switch. |
hud_quickinfo |
Could enable or disable quick-info HUD elements without the client's consent. |
incrementvar |
Could change convar values (by incrementing them). |
killserver |
|
lightprobe |
Could be used to save two files without the client knowing (a cubemap file and a file indicating the local lighting). |
load |
Could load a game without the client's consent. |
log |
Could enable/disable logging to file, console, and udp. |
lookspring |
|
lookstrafe |
|
lservercfgfile |
Could select any config file instead of listenserver.cfg. |
lua_cookieclear |
Could delete cookie library stored data when the client didn't request to. |
lua_error_url |
Could change the url to which lua errors will be sent. |
lua_open |
Now-removed command. |
lua_openscript |
|
lua_openscript_cl |
Could allow the client to open malicious scripts. |
lua_redownload |
Now-removed command. |
lua_reloadents |
Could reload all scripted entities. |
lua_reloadents_cl |
Could reload all scripted entities. |
lua_run |
|
lua_run_cl |
|
lua_showerrors_cl |
Now-removed command. |
lua_showerrors_sv |
Now-removed command. |
m_customaccel |
Could modify mouse settings without the client wanting to. |
m_customaccel_exponent |
Could modify mouse settings without the client wanting to. |
m_customaccel_scale |
Could modify mouse settings without the client wanting to. |
m_forward |
Could modify mouse settings without the client wanting to. |
m_mouseaccel1 |
Could modify mouse settings without the client wanting to. |
m_mouseaccel2 |
Could modify mouse settings without the client wanting to. |
m_mousespeed |
Could modify mouse settings without the client wanting to. |
m_pitch |
Could modify mouse settings without the client wanting to. |
m_side |
Could modify mouse settings without the client wanting to. |
m_yaw |
Could modify mouse settings without the client wanting to. |
map |
Could forcibly load a map without the client wanting to. |
mat_color_projection |
Could enable/disable drawing a overlay with missing texture on top of everything. |
mat_crosshair_edit |
|
mat_crosshair_explorer |
Could be used to open Explorer without the client wanting to, which could exit out of the game. |
mat_dxlevel |
Could changes what GPU features are used based on DirectX version. |
mat_savechanges |
Could save the current video config to the registry (which could cause changes to be saved without the client wanting them). |
mat_texture_save_fonts |
|
mat_setvideomode |
Could sets the width, height, windowed state of the material system. |
mat_texture_limit |
Could limit the amount of texture memory available. |
mat_texture_list |
Could display the texture list without the client wanting to. |
+mat_texture_list |
Could display the texture list without the client wanting to. |
mat_texture_list_content_path |
|
mat_viewportscale |
Could scale down a client's viewport. |
mat_viewportupscale |
Could scale up a client's viewport. |
menu_reload |
Could force a reload of the Lua base menu (which causes the game to crash with a Lua panic error in my test) |
movie_fixwave |
|
mp_flashlight |
Could be used to enable or disable the flashlight for an entire server. |
multvar |
Could change convar values (by multiplying them). |
name |
Could change client's name without the client wanting to. |
playdemo |
|
plugin_load |
Could load server plugins. |
quit |
Could exit the client's game entirely. |
quti |
Now-removed command that in the past could exit the client's game entirely. |
rcon_address |
Could change address of remote server for sending rcon commands. |
rcon_password |
Could change remote console password. |
sensitivity |
Could change the client's mouse sensitivity without their knowledge. |
servercfgfile |
Could select any config file instead of server.cfg. |
showconsole |
Displays the player's F10 console (blocked in the March 2025 update). |
snd_buildcache |
Could exit the client's game entirely. |
snd_ducktovolume |
Could modify sounds settings without the client wanting to. |
snd_gain |
Could modify sounds settings without the client wanting to. |
snd_gain_max |
Could modify sounds settings without the client wanting to. |
snd_gain_min |
Could modify sounds settings without the client wanting to. |
snd_mixahead |
Could modify sounds settings without the client wanting to. |
snd_musicvolume |
Could modify music volume without the client wanting to. |
snd_pitchquality |
Could modify sounds settings without the client wanting to. |
startupmenu |
Could open the initial menu screen and load the background bsp without the client wanting to. (Also causes a crash) |
stuffcmds |
|
suitvolume |
|
sv_allow_wait_command |
Now-removed command. |
sv_cheats |
Could allow cheats on server. |
sv_logfilename_format |
Could change log filename formatting. |
sv_logsdir |
Could change the folder where server logs will be stored. |
test_loop |
Now-removed command. |
test_randomchance |
Now-removed command. |
test_startscript |
Now-removed command. |
toggle |
Could toggle convars without the client requesting to. |
toggleconsole |
Could stop the client from opening the console or open it when they didn't want to. |
tv_record |
Starts SourceTV demo recording. Blocked in the March 2025 update. |
unbind |
Could stop the client from being able to press anything. |
unbind_mac |
Could stop the client from being able to press anything. |
unbindall |
Could stop the client from being able to press anything. |
+voicerecord |
Could allow one to activate the clients microphone without the client wanting to. |
voice_avggain |
Could modify voice chat settings without the client wanting to. |
voice_enable |
Could enable or disable voice chat without the client wanting to. |
voice_fadeouttime |
Could modify voice chat settings without the client wanting to. |
voice_forcemicrecord |
Could modify voice chat settings without the client wanting to. |
voice_gain_downward_multiplier |
Could modify voice chat settings without the client wanting to. |
voice_gain_max |
Could modify voice chat settings without the client wanting to. |
voice_gain_rate |
Could modify voice chat settings without the client wanting to. |
voice_gain_target |
Could modify voice chat settings without the client wanting to. |
voice_inputfromfile |
Could modify voice chat settings without the client wanting to. |
voice_loopback |
Could modify voice chat settings without the client wanting to. |
voice_maxgain |
Could modify voice chat settings without the client wanting to. |
voice_modenable |
Could modify voice chat settings without the client wanting to. |
voice_overdrive |
Could modify voice chat settings without the client wanting to. |
voice_scale |
Could modify voice chat settings without the client wanting to. |
voice_recordtofile |
Could modify voice chat settings without the client wanting to. |
volume |
Can change the volume of the game. |
volume_sfx |
|
vprof_record_start |
Now-removed command. |
vprof_record_stop |
Now-removed command. |
whereis |
Could print out sensitive file paths without consent. This isn't blocked on the Menu realm. |
cancelselect |
|
cc_linger_time |
Could change how long closed captions remain visible without the client's consent. |
cc_predisplay_time |
Could change closed-caption timing without the client's consent. |
cc_subtitles |
Could enable or disable subtitles without the client's consent. |
cl_crosshair_drawoutline |
Could change the client's crosshair appearance without consent. |
cl_crosshair_outlinethickness |
Could change the client's crosshair appearance without consent. |
cl_crosshair_t |
Could change the client's crosshair appearance without consent. |
cl_crosshairalpha |
Could change the client's crosshair appearance without consent. |
cl_crosshaircolor_b |
Could change the client's crosshair appearance without consent. |
cl_crosshaircolor_g |
Could change the client's crosshair appearance without consent. |
cl_crosshaircolor_r |
Could change the client's crosshair appearance without consent. |
cl_crosshairdot |
Could change the client's crosshair appearance without consent. |
cl_crosshairgap |
Could change the client's crosshair appearance without consent. |
cl_crosshairsize |
Could change the client's crosshair appearance without consent. |
cl_crosshairstyle |
Could change the client's crosshair appearance without consent. |
cl_crosshairthickness |
Could change the client's crosshair appearance without consent. |
cl_crosshairusealpha |
Could change the client's crosshair appearance without consent. |
cl_defaultweapon |
Could change the weapon selected by default without the client's consent. |
cl_ignorepackets |
Could cause lag or a disconnection by making the client ignore network packets. |
cl_particle_stats_start |
|
cl_particle_stats_stop |
|
cl_particle_stats_trigger_count |
|
cl_savescreenshotstosteam |
|
con_bgalpha |
Could change the console's appearance without the client's consent. |
con_border |
Could change the console's appearance without the client's consent. |
con_drawnotify |
Could change notification display without the client's consent. |
contimes |
Could change how long console notifications remain visible without the client's consent. |
datacachesize |
Could change the data-cache allocation and degrade performance without the client's consent. |
demo_quitafterplayback |
Could make the game quit after demo playback without the client's consent. |
dsp_enhance_stereo |
Could change audio processing without the client's consent. |
dsp_slow_cpu |
Could change audio processing without the client's consent. |
editdemo |
Could open the demo editor without the client's consent. |
engine_no_focus_sleep |
Could change CPU usage while the game is unfocused without the client's consent. |
filesystem_buffer_size |
Could change filesystem I/O buffering and degrade performance without the client's consent. |
filesystem_max_stdio_read |
Could change filesystem read limits and degrade performance without the client's consent. |
filesystem_native |
|
filesystem_report_buffered_io |
|
filesystem_unbuffered_io |
Could change filesystem I/O behavior and degrade performance without the client's consent. |
fps_max_menu |
Could change the menu frame-rate limit without the client's consent. |
fps_max_nofocus |
Could change the unfocused frame-rate limit without the client's consent. |
fs_monitor_read_from_pack |
|
fs_report_sync_opens |
|
fs_tellmeyoursecrets |
Could disclose filesystem information in the console. |
fs_warning_level |
|
gm_demo_to_video |
Could start a resource-intensive demo-to-video conversion without the client's consent. |
host_writeconfig_lua |
Could write Lua configuration without the client's consent. |
hud_autoreloadscript |
Could force HUD scripts to reload without the client's consent. |
hud_freezecamhide |
Could change the freeze-camera HUD without the client's consent. |
hud_reloadscheme |
Could force the HUD scheme to reload without the client's consent. |
logaddress_add |
Could redirect log messages to an arbitrary network address. |
lua_strict |
|
m_customaccel_max |
Could change mouse acceleration settings without the client's consent. |
map_background |
Could force the client to load a background map without consent. |
map_edit |
Could force the client to load a map-editing session without consent. |
mat_aaquality |
Could change anti-aliasing quality without the client's consent. |
mat_antialias |
Could enable or disable anti-aliasing without the client's consent. |
mat_bufferprimitives |
|
mat_colorcorrection |
|
mat_disable_d3d9ex |
|
mat_dump_rts |
|
mat_filterlightmaps |
|
mat_filtertextures |
|
mat_forceaniso |
Could change anisotropic filtering without the client's consent. |
mat_forcehardwaresync |
|
mat_forcemanagedtextureintohardware |
|
mat_hdr_level |
|
mat_managedtextures |
|
mat_monitorgamma |
Could change display gamma without the client's consent. |
mat_monitorgamma_tv_enabled |
Could change display gamma behavior without the client's consent. |
mat_picmip |
Could reduce texture quality without the client's consent. |
mat_powersavingsmode |
|
mat_reducefillrate |
|
mat_reduceparticles |
|
mat_requires_rt_alloc_first |
|
mat_supportflashlight |
|
mat_texture_list_txlod_sync |
|
mat_trilinear |
Could enable or disable trilinear filtering without the client's consent. |
mat_vsync |
Could enable or disable vertical synchronization without the client's consent. |
maxplayers |
|
mem_force_flush |
|
mem_max_heapsize |
|
mp_decals |
Could change the number of decals displayed without the client's consent. |
muzzleflash_light |
Could enable or disable muzzle-flash lighting without the client's consent. |
nextdemo |
|
net_graph |
|
path |
|
physics_budget |
|
physics_constraints |
|
physics_debug_entity |
Could expose or alter physics debugging information without the client's consent. |
physics_highlight_active |
Could enable physics-entity highlighting without the client's consent. |
physics_report_active |
Could enable physics reporting without the client's consent. |
physics_select |
Could select physics objects for debugging without the client's consent. |
r_ambientboost |
|
r_ambientfactor |
|
r_ambientfraction |
|
r_ambientmin |
|
r_drawlightcache |
|
r_lightcachemodel |
|
r_rootlod |
|
r_shader_srgb |
|
r_shadowrendertotexture |
|
r_teeth |
|
r_waterforceexpensive |
|
r_waterforcereflectentities |
|
r_worldlights |
|
scene_flush |
|
sdl_displayindex |
|
setinfo |
|
skill |
|
snd_mute_losefocus |
|
snd_surround_speakers |
|
spike |
|
startdemos |
|
startmovie |
|
surfaceprop |
|
sv_log_storetime |
|
timedemo |
|
timedemoquit |
|
tv_relay |
Could alter SourceTV relay behavior without the server operator's consent. |
tv_retry |
Could force SourceTV relay retries without the server operator's consent. |
vcr_verbose |
|
voice_overdrivefadetime |
Could change voice-chat fade-out timing without the client's consent. |
Garry's Mod
Rust
Steamworks
Wiki Help