Garry's Mod Wiki

Home / Blocked ConCommands

Blocked ConCommands

This is a list of all concommands and convars blacklisted from being ran or changed with RunConsoleCommand, game.ConsoleCommand and Player:ConCommand. Server and clients can still run the commands normally from console. Certain console commands have been disabled for a variety of reasons, usually to prevent harm or annoyance to players, such as unbinding all their keys using unbindall.

When you attempt to run RunConsoleCommand with a blocked command, this error will be thrown in console: RunConsoleCommand: Command is blocked! (<command name>).

Running Player:ConCommand with a blocked command will throw red text in console: ConCommand blocked! (<command name>).

Running game.ConsoleCommand with a blocked command will throw red text in console: game.ConsoleCommand blocked! (<command name>).

This list was ripped from Garry's Mod dynamic libraries.
Name Reason
__screenshot_internal Now-removed command that in the past could create a screenshot without the client's consent.
_restart Blocked only client-side. Could crash the player's game.
alias Could alias commands without the client's consent.
askconnect_accept Could accept a redirect request without the client wanting to be redirected.
bind Could be used to rebind keys without the client's consent.
bind_mac Could be used to rebind keys without the client's consent.
bindtoggle Could be used to rebind keys without the client's consent.
buildcubemaps Could rebuild the cubemaps on a server, which can cause errors.
cef_credits Could open big count of webpanels.
cl_allowdownload Could change the download settings without the client wanting to.
cl_allowupload Could change the uploads settings without the client wanting to.
cl_chatfilters Could change the chat filter settings without the client wanting to.
cl_cloud_settings Could change the cloud settings without the client wanting to.
cl_downloadfilter Could change which files can be downloaded from the server without the client consent.
cl_enable_loadingurl Could enable/disable custom loading screens provided by joined servers without the client wanting to.
cl_logofile Could choose spray file without the client wanting to.
cl_mouseenable Could enable or disable the mouse without the client wanting to.
cl_software_cursor Could replace the cursor with missing material (this makes the cursor invisible).
cl_playerspraydisable Persists across sessions, use the GM:PlayerSpray hook or sv_allowupload 0 to disable sprays.
clear Could clear the console without the client's consent.
con_enable Could enable or disable the console.
con_filter_dupe Could modify console filtering settings without the client wanting to.
con_filter_enable Could modify console filtering settings without the client wanting to.
con_filter_text Could modify console filtering settings without the client wanting to.
con_filter_text_out Could modify console filtering settings without the client wanting to.
con_logfile Now-removed convar that in the past could enable/disable writing console output to a file.
connect Could connect to specified server without the client's consent.
crosshair Could enable or disable the crosshair without the client's consent.
devshots_screenshot Could create a screenshot without the client's consent.
debug_dump
developer Allows you to show or hide the player console details at the top left of the player screen.
echo Could be used to print fake console messages.
ent_fire Could let clients manipulate entities more than expected.
ent_setname Could let clients manipulate entities more than expected.
exec Could allow the client to execute malicious scripts.
exit Could exit the client's game entirely.
fov_desired
fps_max
gamemode_reload Now-removed command.
gamemode_reload_cl Now-removed command.
gameui_hide Could hide the game UI when the client didn't request to.
gameui_preventescapetoshow Could stop the client from opening the game UI.
gameui_show_dialog Could show an arbitrary dialog that crashes the game.
gm_video Could recording of a .webm when the client didn't request to.
gmod_language Could change the clients language without the client wanting it.
gmod_tos Could open Facepunch's Terms of Service when the client didn't request to.
gmod_privacy Could open Facepunch's Privacy Policy when the client didn't request to.
gmod_modding Could open Facepunch's Modding guidelines when the client didn't request to.
gmod_servers Could open the Server Operator rules when the client didn't request to.
gmod_delete_temp_files Could modify temporary file settings without the client wanting to.
hideconsole Could hide the console when the client didn't request to.
host_writeconfig Could save the current config settings to the registry (which could cause changes to be saved without the client wanting them).
hud_fastswitch Could enable/disable fast weapons switch.
incrementvar Could change convar values (by incrementing them).
killserver
lightprobe Could be used to save two files without the client knowing (a cubemap file and a file indicating the local lighting).
load Could load a game without the client's consent.
log Could enable/disable logging to file, console, and udp.
lookspring
lookstrafe
lservercfgfile Could select any config file instead of listenserver.cfg.
lua_cookieclear Could delete cookie library stored data when the client didn't request to.
lua_error_url Could change the url to which lua errors will be sent.
lua_open Now-removed command.
lua_openscript
lua_openscript_cl Could allow the client to open malicious scripts.
lua_redownload Now-removed command.
lua_reloadents Could reload all scripted entities.
lua_reloadents_cl Could reload all scripted entities.
lua_run
lua_run_cl
lua_showerrors_cl Now-removed command.
lua_showerrors_sv Now-removed command.
m_customaccel Could modify mouse settings without the client wanting to.
m_customaccel_exponent Could modify mouse settings without the client wanting to.
m_customaccel_scale Could modify mouse settings without the client wanting to.
m_forward Could modify mouse settings without the client wanting to.
m_mouseaccel1 Could modify mouse settings without the client wanting to.
m_mouseaccel2 Could modify mouse settings without the client wanting to.
m_mousespeed Could modify mouse settings without the client wanting to.
m_pitch Could modify mouse settings without the client wanting to.
m_side Could modify mouse settings without the client wanting to.
m_yaw Could modify mouse settings without the client wanting to.
map Could forcibly load a map without the client wanting to.
mat_color_projection Could enable/disable drawing a overlay with missing texture on top of everything.
mat_crosshair_edit
mat_crosshair_explorer Could be used to open Explorer without the client wanting to, which could exit out of the game.
mat_dxlevel Could changes what GPU features are used based on DirectX version.
mat_savechanges Could save the current video config to the registry (which could cause changes to be saved without the client wanting them).
mat_texture_save_fonts
mat_setvideomode Could sets the width, height, windowed state of the material system.
mat_texture_limit Could limit the amount of texture memory available.
mat_texture_list Could display the texture list without the client wanting to.
+mat_texture_list Could display the texture list without the client wanting to.
mat_texture_list_content_path
mat_viewportscale Could scale down a client's viewport.
mat_viewportupscale Could scale up a client's viewport.
menu_reload Could force a reload of the Lua base menu (which causes the game to crash with a Lua panic error in my test)
movie_fixwave
mp_flashlight Could be used to enable or disable the flashlight for an entire server.
multvar Could change convar values (by multiplying them).
name Could change client's name without the client wanting to.
playdemo
plugin_load Could load server plugins.
quit Could exit the client's game entirely.
quti Now-removed command that in the past could exit the client's game entirely.
r_aspect Now-removed command.
rcon_address Could change address of remote server for sending rcon commands.
rcon_password Could change remote console password.
sensitivity Could change the client's mouse sensitivity without their knowledge.
servercfgfile Could select any config file instead of server.cfg.
showconsole Displays the player's F10 console (blocked in the March 2025 update).
snd_buildcache Could exit the client's game entirely.
snd_ducktovolume Could modify sounds settings without the client wanting to.
snd_gain Could modify sounds settings without the client wanting to.
snd_gain_max Could modify sounds settings without the client wanting to.
snd_gain_min Could modify sounds settings without the client wanting to.
snd_mixahead Could modify sounds settings without the client wanting to.
snd_musicvolume Could modify music volume without the client wanting to.
snd_pitchquality Could modify sounds settings without the client wanting to.
startupmenu Could open the initial menu screen and load the background bsp without the client wanting to. (Also causes a crash)
stuffcmds
suitvolume
sv_allow_wait_command Now-removed command.
sv_cheats Could allow cheats on server.
sv_logfilename_format Could change log filename formatting.
sv_logsdir Could change the folder where server logs will be stored.
test_loop Now-removed command.
test_randomchance Now-removed command.
test_startscript Now-removed command.
toggle Could toggle convars without the client requesting to.
toggleconsole Could stop the client from opening the console or open it when they didn't want to.
tv_record Starts SourceTV demo recording. Blocked in the March 2025 update.
unbind Could stop the client from being able to press anything.
unbind_mac Could stop the client from being able to press anything.
unbindall Could stop the client from being able to press anything.
+voicerecord Could allow one to activate the clients microphone without the client wanting to.
voice_avggain Could modify voice chat settings without the client wanting to.
voice_enable Could enable or disable voice chat without the client wanting to.
voice_fadeouttime Could modify voice chat settings without the client wanting to.
voice_forcemicrecord Could modify voice chat settings without the client wanting to.
voice_gain_downward_multiplier Could modify voice chat settings without the client wanting to.
voice_gain_max Could modify voice chat settings without the client wanting to.
voice_gain_rate Could modify voice chat settings without the client wanting to.
voice_gain_target Could modify voice chat settings without the client wanting to.
voice_inputfromfile Could modify voice chat settings without the client wanting to.
voice_loopback Could modify voice chat settings without the client wanting to.
voice_maxgain Could modify voice chat settings without the client wanting to.
voice_modenable Could modify voice chat settings without the client wanting to.
voice_overdrive Could modify voice chat settings without the client wanting to.
voice_scale Could modify voice chat settings without the client wanting to.
voice_recordtofile Could modify voice chat settings without the client wanting to.
volume Can change the volume of the game.
volume_sfx
vprof_record_start Now-removed command.
vprof_record_stop Now-removed command.
whereis Could print out sensitive file paths without consent. This isn't blocked on the Menu realm.
cancelselect

Account Management

Special Pages

Wiki List