Revision Difference
Blocked_ConCommands#560150
<cat>Dev</cat>
This is a list of all concommands and convars blacklisted from being ran or changed with <page>Global.RunConsoleCommand</page>, <page>game.ConsoleCommand</page> and <page>Player:ConCommand</page>. Server and clients can still run the commands normally from console. Certain console commands have been disabled for a variety of reasons, usually to prevent harm or annoyance to players, such as unbinding all their keys using `unbindall`.
When you attempt to run <page>Global.RunConsoleCommand</page>, this error will be thrown in console: `RunConsoleCommand: Command is blocked! (<command name>)`.
Running <page>Player:ConCommand</page> will throw red text in console: `ConCommand blocked! (<command name>)`.
When you attempt to run <page>Global.RunConsoleCommand</page> with a blocked command, this error will be thrown in console: `RunConsoleCommand: Command is blocked! (<command name>)`.
Running <page>Player:ConCommand</page> with a blocked command will throw red text in console: `ConCommand blocked! (<command name>)`.
⤶
Running <page>game.ConsoleCommand</page> with a blocked command will throw red text in console: `game.ConsoleCommand blocked! (<command name>)`.⤶
<note>
This list was ripped from Garry's Mod dynamic libraries.
</note>
Name | Reason |
-----|--------|
| _restart | Blocked only client-side. Could crash the player's game |
| alias | Could alias commands without the client's consent |
| askconnect_accept | Could accept a redirect request without the client wanting to be redirected |
| bind | Could be used to rebind keys without the client's consent |
| bind_mac | Could be used to rebind keys without the client's consent |
| bindtoggle | Could be used to rebind keys without the client's consent |
| buildcubemaps | Could rebuild the cubemaps on a server, which can cause errors |
| cef_credits | Could open big count of webpanels |
| cl_allowdownload | Could change the download settings without the client wanting to |
| cl_allowupload | Could change the uploads settings without the client wanting to |
| cl_chatfilters | Could change the chat filter settings without the client wanting to |
| cl_downloadfilter | Could change which files can be downloaded from the server without the client consent |
| cl_enable_loadingurl | Could enable/disable custom loading screens provided by joined servers without the client wanting to |
| cl_logofile | Could choose spray file without the client wanting to |
| cl_mouseenable | Could enable or disable the mouse without the client wanting to |
| cl_software_cursor | Could replace the cursor with missing material (this makes the cursor invisible) |
| clear | Could clear the console without the client's consent |
| con_enable | Could enable or disable the console |
| con_filter_dupe | Could modify console filtering settings without the client wanting to |
| con_filter_enable | Could modify console filtering settings without the client wanting to |
| con_filter_text | Could modify console filtering settings without the client wanting to |
| con_filter_text_out | Could modify console filtering settings without the client wanting to |
| con_logfile | Now-removed convar that in the past could enable/disable writing console output to a file |
| connect | Could connect to specified server without the client's consent |
| crosshair | Could enable or disable the crosshair without the client's consent |
| debug_dump | |
| echo | Could be used to print fake console messages |
| ent_fire | Could let clients manipulate entities more than expected |
| ent_setname | Could let clients manipulate entities more than expected |
| exec | Could allow the client to execute malicious scripts |
| exit | Could exit the client's game entirely |
| gamemode_reload | Now-removed command |
| gamemode_reload_cl | Now-removed command |
| gameui_hide | Could hide the game UI when the client didn't request to |
| gameui_preventescapetoshow | Could stop the client from opening the game UI |
| gameui_show_dialog | Could show an arbitrary dialog that crashes the game |
| gm_video | Could recording of a .webm when the client didn't request to |
| hideconsole | Could hide the console when the client didn't request to |
| host_writeconfig | Could save the current config settings to the registry (which could cause changes to be saved without the client wanting them) |
| hud_fastswitch | Could enable/disable fast weapons switch |
| incrementvar | Could change convar values (by increment them) |
| lightprobe | Could be used to save two files without the client knowing (a cubemap file and a file indicating the local lighting) |
| log | Could enable/disable logging to file, console, and udp |
| lookspring | |
| lookstrafe | |
| lservercfgfile | Could select any config file instead of listenserver.cfg |
| lua_cookieclear | Could delete cookie library stored data when the client didn't request to |
| lua_error_url | Could change the url to which lua errors will be sent |
| lua_open | Now-removed command |
| lua_openscript | |
| lua_openscript_cl | Could allow the client to open malicious scripts |
| lua_redownload | Now-removed command |
| lua_reloadents | Could reload all scripted entities |
| lua_reloadents_cl | Could reload all scripted entities |
| lua_run | |
| lua_run_cl | |
| lua_showerrors_cl | Now-removed command |
| lua_showerrors_sv | Now-removed command |
| m_customaccel | Could modify mouse settings without the client wanting to |
| m_customaccel_exponent | Could modify mouse settings without the client wanting to |
| m_customaccel_scale | Could modify mouse settings without the client wanting to |
| m_forward | Could modify mouse settings without the client wanting to |
| m_mouseaccel1 | Could modify mouse settings without the client wanting to |
| m_mouseaccel2 | Could modify mouse settings without the client wanting to |
| m_mousespeed | Could modify mouse settings without the client wanting to |
| m_pitch | Could modify mouse settings without the client wanting to |
| m_side | Could modify mouse settings without the client wanting to |
| m_yaw | Could modify mouse settings without the client wanting to |
| mat_color_projection | Could enable/disable drawing a overlay with missing texture on top of everything |
| mat_crosshair_explorer | Could be used to open Explorer without the client wanting to, which could exit out of the game |
| mat_dxlevel | Could changes what GPU features are used based on DirectX version |
| mat_savechanges | Could save the current video config to the registry (which could cause changes to be saved without the client wanting them) |
| mat_setvideomode | Could sets the width, height, windowed state of the material system |
| mat_texture_limit | Could limit the amount of texture memory available |
| mat_viewportscale | Could scale down a client's viewport |
| mat_viewportupscale | Could scale up a client's viewport |
| menu_reload | Could force a reload of the Lua base menu (which causes the game to crash with a Lua panic error in my test) |
| movie_fixwave | |
| mp_flashlight | Could be used to enable or disable the flashlight for an entire server |
| multvar | Could change convar values (by multiplying them) |
| name | |
| plugin_load | Could load server plugins |
| quit | Could exit the client's game entirely |
| quti | Now-removed command that in the past could exit the client's game entirely |
| r_aspect | Now-removed command |
| rcon_address | Could change address of remote server for sending rcon commands |
| rcon_password | Could change remote console password |
| sensitivity | Could change the client's mouse sensitivity without their knowledge |
| servercfgfile | Could select any config file instead of server.cfg |
| snd_buildcache | Could exit the client's game entirely |
| snd_ducktovolume | Could modify sounds settings without the client wanting to |
| snd_gain | Could modify sounds settings without the client wanting to |
| snd_gain_max | Could modify sounds settings without the client wanting to |
| snd_gain_min | Could modify sounds settings without the client wanting to |
| snd_mixahead | Could modify sounds settings without the client wanting to |
| snd_musicvolume | Could modify music volume without the client wanting to |
| snd_pitchquality | Could modify sounds settings without the client wanting to |
| suitvolume | |
| sv_cheats | Could allow cheats on server |
| sv_logfilename_format | Could change log filename formatting |
| sv_logsdir | Could change the folder where server logs will be stored |
| test_randomchance | Now-removed command |
| test_startscript | Now-removed command |
| toggle | Could toggle convars without the client requesting to |
| toggleconsole | Could stop the client from opening the console or open it when they didn't want to |
| unbind | Could stop the client from being able to press anything |
| unbind_mac | Could stop the client from being able to press anything |
| unbindall | Could stop the client from being able to press anything |
| voice_avggain | Could modify voice chat settings without the client wanting to |
| voice_enable | Could enable or disable voice chat without the client wanting to |
| voice_fadeouttime | Could modify voice chat settings without the client wanting to |
| voice_forcemicrecord | Could modify voice chat settings without the client wanting to |
| voice_gain_downward_multiplier | Could modify voice chat settings without the client wanting to |
| voice_gain_max | Could modify voice chat settings without the client wanting to |
| voice_gain_rate | Could modify voice chat settings without the client wanting to |
| voice_gain_target | Could modify voice chat settings without the client wanting to |
| voice_inputfromfile | Could modify voice chat settings without the client wanting to |
| voice_loopback | Could modify voice chat settings without the client wanting to |
| voice_maxgain | Could modify voice chat settings without the client wanting to |
| voice_modenable | Could modify voice chat settings without the client wanting to |
| voice_overdrive | Could modify voice chat settings without the client wanting to |
| voice_scale | Could modify voice chat settings without the client wanting to |
| voice_recordtofile | Could modify voice chat settings without the client wanting to |
| volume | Can change the volume of the game |
| volume_sfx | || volume_sfx |⤶
| whereis | Could print out sensitive file paths without consent. This isn't blocked on the Menu <page text="realm">States</page>. |