Revision Difference
Blocked_ConCommands#561629
<cat>Dev.Ref</cat>
This is a list of all concommands and convars blacklisted from being ran or changed with <page>Global.RunConsoleCommand</page>, <page>game.ConsoleCommand</page> and <page>Player:ConCommand</page>. Server and clients can still run the commands normally from console. Certain console commands have been disabled for a variety of reasons, usually to prevent harm or annoyance to players, such as unbinding all their keys using `unbindall`.
When you attempt to run <page>Global.RunConsoleCommand</page> with a blocked command, this error will be thrown in console: `RunConsoleCommand: Command is blocked! (<command name>)`.
Running <page>Player:ConCommand</page> with a blocked command will throw red text in console: `ConCommand blocked! (<command name>)`.
Running <page>game.ConsoleCommand</page> with a blocked command will throw red text in console: `game.ConsoleCommand blocked! (<command name>)`.
<note>
This list was ripped from Garry's Mod dynamic libraries.
</note>
⤶
Name | Reason |
-----|--------|⤶
| _restart | Blocked only client-side. Could crash the player's game |⤶
| alias | Could alias commands without the client's consent |⤶
| askconnect_accept | Could accept a redirect request without the client wanting to be redirected |⤶
| bind | Could be used to rebind keys without the client's consent |⤶
| bind_mac | Could be used to rebind keys without the client's consent |⤶
| bindtoggle | Could be used to rebind keys without the client's consent |⤶
| buildcubemaps | Could rebuild the cubemaps on a server, which can cause errors |⤶
| cef_credits | Could open big count of webpanels |⤶
| cl_allowdownload | Could change the download settings without the client wanting to |⤶
| cl_allowupload | Could change the uploads settings without the client wanting to |⤶
| cl_chatfilters | Could change the chat filter settings without the client wanting to |⤶
| cl_downloadfilter | Could change which files can be downloaded from the server without the client consent |⤶
| cl_enable_loadingurl | Could enable/disable custom loading screens provided by joined servers without the client wanting to |⤶
| cl_logofile | Could choose spray file without the client wanting to |⤶
| cl_mouseenable | Could enable or disable the mouse without the client wanting to |⤶
| cl_software_cursor | Could replace the cursor with missing material (this makes the cursor invisible) |⤶
| clear | Could clear the console without the client's consent |⤶
| con_enable | Could enable or disable the console |⤶
| con_filter_dupe | Could modify console filtering settings without the client wanting to |⤶
| con_filter_enable | Could modify console filtering settings without the client wanting to |⤶
| con_filter_text | Could modify console filtering settings without the client wanting to |⤶
| con_filter_text_out | Could modify console filtering settings without the client wanting to |⤶
| con_logfile | Now-removed convar that in the past could enable/disable writing console output to a file |⤶
| connect | Could connect to specified server without the client's consent |⤶
| crosshair | Could enable or disable the crosshair without the client's consent |⤶
| debug_dump | |
| echo | Could be used to print fake console messages |⤶
| ent_fire | Could let clients manipulate entities more than expected |⤶
| ent_setname | Could let clients manipulate entities more than expected |⤶
| exec | Could allow the client to execute malicious scripts |⤶
| exit | Could exit the client's game entirely |⤶
| gamemode_reload | Now-removed command |⤶
| gamemode_reload_cl | Now-removed command |⤶
| gameui_hide | Could hide the game UI when the client didn't request to |⤶
| gameui_preventescapetoshow | Could stop the client from opening the game UI |⤶
| gameui_show_dialog | Could show an arbitrary dialog that crashes the game |⤶
| gm_video | Could recording of a .webm when the client didn't request to |⤶
| gmod_language | Could change the clients language without the client wanting it |⤶
| gmod_tos | Could open Facepunch's Terms of Service when the client didn't request to |⤶
| gmod_privacy | Could open Facepunch's Privacy Policy when the client didn't request to |⤶
| gmod_modding | Could open Facepunch's Modding guidelines when the client didn't request to |⤶
| gmod_servers | Could open the Server Operator rules when the client didn't request to |⤶
| gmod_delete_temp_files | |
| hideconsole | Could hide the console when the client didn't request to |⤶
| host_writeconfig | Could save the current config settings to the registry (which could cause changes to be saved without the client wanting them) |⤶
| hud_fastswitch | Could enable/disable fast weapons switch |⤶
| incrementvar | Could change convar values (by increment them) |⤶
| lightprobe | Could be used to save two files without the client knowing (a cubemap file and a file indicating the local lighting) |⤶
| log | Could enable/disable logging to file, console, and udp |⤶
| lookspring | |
| lookstrafe | |
| lservercfgfile | Could select any config file instead of listenserver.cfg |⤶
| lua_cookieclear | Could delete cookie library stored data when the client didn't request to |⤶
| lua_error_url | Could change the url to which lua errors will be sent |⤶
| lua_open | Now-removed command |⤶
| lua_openscript | |
| lua_openscript_cl | Could allow the client to open malicious scripts |⤶
| lua_redownload | Now-removed command |⤶
| lua_reloadents | Could reload all scripted entities |⤶
| lua_reloadents_cl | Could reload all scripted entities |⤶
| lua_run | |
| lua_run_cl | |
| lua_showerrors_cl | Now-removed command |⤶
| lua_showerrors_sv | Now-removed command |⤶
| m_customaccel | Could modify mouse settings without the client wanting to |⤶
| m_customaccel_exponent | Could modify mouse settings without the client wanting to |⤶
| m_customaccel_scale | Could modify mouse settings without the client wanting to |⤶
| m_forward | Could modify mouse settings without the client wanting to |⤶
| m_mouseaccel1 | Could modify mouse settings without the client wanting to |⤶
| m_mouseaccel2 | Could modify mouse settings without the client wanting to |⤶
| m_mousespeed | Could modify mouse settings without the client wanting to |⤶
| m_pitch | Could modify mouse settings without the client wanting to |⤶
| m_side | Could modify mouse settings without the client wanting to |⤶
| m_yaw | Could modify mouse settings without the client wanting to |⤶
| mat_color_projection | Could enable/disable drawing a overlay with missing texture on top of everything |⤶
| mat_crosshair_explorer | Could be used to open Explorer without the client wanting to, which could exit out of the game |⤶
| mat_dxlevel | Could changes what GPU features are used based on DirectX version |⤶
| mat_savechanges | Could save the current video config to the registry (which could cause changes to be saved without the client wanting them) |⤶
| mat_setvideomode | Could sets the width, height, windowed state of the material system |⤶
| mat_texture_limit | Could limit the amount of texture memory available |⤶
| mat_viewportscale | Could scale down a client's viewport |⤶
| mat_viewportupscale | Could scale up a client's viewport |⤶
| menu_reload | Could force a reload of the Lua base menu (which causes the game to crash with a Lua panic error in my test) |⤶
| movie_fixwave | |
| mp_flashlight | Could be used to enable or disable the flashlight for an entire server |⤶
| multvar | Could change convar values (by multiplying them) |⤶
| name | |
| playdemo | |
| plugin_load | Could load server plugins |⤶
| quit | Could exit the client's game entirely |⤶
| quti | Now-removed command that in the past could exit the client's game entirely |⤶
| r_aspect | Now-removed command |⤶
| rcon_address | Could change address of remote server for sending rcon commands |⤶
| rcon_password | Could change remote console password |⤶
| sensitivity | Could change the client's mouse sensitivity without their knowledge |⤶
| servercfgfile | Could select any config file instead of server.cfg |⤶
| snd_buildcache | Could exit the client's game entirely |⤶
| snd_ducktovolume | Could modify sounds settings without the client wanting to |⤶
| snd_gain | Could modify sounds settings without the client wanting to |⤶
| snd_gain_max | Could modify sounds settings without the client wanting to |⤶
| snd_gain_min | Could modify sounds settings without the client wanting to |⤶
| snd_mixahead | Could modify sounds settings without the client wanting to |⤶
| snd_musicvolume | Could modify music volume without the client wanting to |⤶
| snd_pitchquality | Could modify sounds settings without the client wanting to |⤶
| stuffcmds | |
| suitvolume | |
| sv_allow_wait_command | Now-removed command |⤶
| sv_cheats | Could allow cheats on server |⤶
| sv_logfilename_format | Could change log filename formatting |⤶
| sv_logsdir | Could change the folder where server logs will be stored |⤶
| test_loop | Now-removed command |⤶
| test_randomchance | Now-removed command |⤶
| test_startscript | Now-removed command |⤶
| toggle | Could toggle convars without the client requesting to |⤶
| toggleconsole | Could stop the client from opening the console or open it when they didn't want to |⤶
| unbind | Could stop the client from being able to press anything |⤶
| unbind_mac | Could stop the client from being able to press anything |⤶
| unbindall | Could stop the client from being able to press anything |⤶
| +voicerecord | Could allow one to activate the clients microphone without the client wanting to |⤶
| voice_avggain | Could modify voice chat settings without the client wanting to |⤶
| voice_enable | Could enable or disable voice chat without the client wanting to |⤶
| voice_fadeouttime | Could modify voice chat settings without the client wanting to |⤶
| voice_forcemicrecord | Could modify voice chat settings without the client wanting to |⤶
| voice_gain_downward_multiplier | Could modify voice chat settings without the client wanting to |⤶
| voice_gain_max | Could modify voice chat settings without the client wanting to |⤶
| voice_gain_rate | Could modify voice chat settings without the client wanting to |⤶
| voice_gain_target | Could modify voice chat settings without the client wanting to |⤶
| voice_inputfromfile | Could modify voice chat settings without the client wanting to |⤶
| voice_loopback | Could modify voice chat settings without the client wanting to |⤶
| voice_maxgain | Could modify voice chat settings without the client wanting to |⤶
| voice_modenable | Could modify voice chat settings without the client wanting to |⤶
| voice_overdrive | Could modify voice chat settings without the client wanting to |⤶
| voice_scale | Could modify voice chat settings without the client wanting to |⤶
| voice_recordtofile | Could modify voice chat settings without the client wanting to |⤶
| volume | Can change the volume of the game |⤶
| volume_sfx | |
| vprof_record_start | Now-removed command |⤶
| vprof_record_stop | Now-removed command |⤶
| whereis | Could print out sensitive file paths without consent. This isn't blocked on the Menu <page text="realm">States</page>. |⤶
| Name | Reason |
|:-----|:-------|⤶
| `_restart` | Blocked only client-side. Could crash the player's game⤶
| `alias` | Could alias commands without the client's consent⤶
| `askconnect_accept` | Could accept a redirect request without the client wanting to be redirected⤶
| `bind` | Could be used to rebind keys without the client's consent⤶
| `bind_mac` | Could be used to rebind keys without the client's consent⤶
| `bindtoggle` | Could be used to rebind keys without the client's consent⤶
| `buildcubemaps` | Could rebuild the cubemaps on a server, which can cause errors⤶
| `cef_credits` | Could open big count of webpanels⤶
| `cl_allowdownload` | Could change the download settings without the client wanting to ⤶
| `cl_allowupload` | Could change the uploads settings without the client wanting to⤶
| `cl_chatfilters` | Could change the chat filter settings without the client wanting to⤶
| `cl_downloadfilter` | Could change which files can be downloaded from the server without the client consent⤶
| `cl_enable_loadingurl` | Could enable/disable custom loading screens provided by joined servers without the client wanting to⤶
| `cl_logofile` | Could choose spray file without the client wanting to⤶
| `cl_mouseenable` | Could enable or disable the mouse without the client wanting to⤶
| `cl_software_cursor` | Could replace the cursor with missing material (this makes the cursor invisible)⤶
| `clear` | Could clear the console without the client's consent⤶
| `con_enable` | Could enable or disable the console⤶
| `con_filter_dupe` | Could modify console filtering settings without the client wanting to⤶
| `con_filter_enable` | Could modify console filtering settings without the client wanting to⤶
| `con_filter_text` | Could modify console filtering settings without the client wanting to⤶
| `con_filter_text_out` | Could modify console filtering settings without the client wanting to⤶
| `con_logfile` | Now-removed convar that in the past could enable/disable writing console output to a file⤶
| `connect` | Could connect to specified server without the client's consent⤶
| `crosshair` | Could enable or disable the crosshair without the client's consent⤶
| `debug_dump` |
| `echo` | Could be used to print fake console messages⤶
| `ent_fire` | Could let clients manipulate entities more than expected⤶
| `ent_setname` | Could let clients manipulate entities more than expected⤶
| `exec` | Could allow the client to execute malicious scripts⤶
| `exit` | Could exit the client's game entirely⤶
| `gamemode_reload` | Now-removed command⤶
| `gamemode_reload_cl` | Now-removed command⤶
| `gameui_hide` | Could hide the game UI when the client didn't request to⤶
| `gameui_preventescapetoshow` | Could stop the client from opening the game UI⤶
| `gameui_show_dialog` | Could show an arbitrary dialog that crashes the game⤶
| `gm_video` | Could recording of a .webm when the client didn't request to⤶
| `gmod_language` | Could change the clients language without the client wanting it⤶
| `gmod_tos` | Could open Facepunch's Terms of Service when the client didn't request to⤶
| `gmod_privacy` | Could open Facepunch's Privacy Policy when the client didn't request to⤶
| `gmod_modding` | Could open Facepunch's Modding guidelines when the client didn't request to⤶
| `gmod_servers` | Could open the Server Operator rules when the client didn't request to⤶
| `gmod_delete_temp_files` |
| `hideconsole` | Could hide the console when the client didn't request to⤶
| `host_writeconfig` | Could save the current config settings to the registry (which could cause changes to be saved without the client wanting them)⤶
| `hud_fastswitch` | Could enable/disable fast weapons switch⤶
| `incrementvar` | Could change convar values (by increment them)⤶
| `lightprobe` | Could be used to save two files without the client knowing (a cubemap file and a file indicating the local lighting)⤶
| `log` | Could enable/disable logging to file, console, and udp⤶
| `lookspring` |
| `lookstrafe` |
| `lservercfgfile` | Could select any config file instead of listenserver.cfg⤶
| `lua_cookieclear` | Could delete cookie library stored data when the client didn't request to⤶
| `lua_error_url` | Could change the url to which lua errors will be sent⤶
| `lua_open` | Now-removed command⤶
| `lua_openscript` |
| `lua_openscript_cl` | Could allow the client to open malicious scripts⤶
| `lua_redownload` | Now-removed command⤶
| `lua_reloadents` | Could reload all scripted entities⤶
| `lua_reloadents_cl` | Could reload all scripted entities⤶
| `lua_run` |
| `lua_run_cl` |
| `lua_showerrors_cl` | Now-removed command⤶
| `lua_showerrors_sv` | Now-removed command⤶
| `m_customaccel` | Could modify mouse settings without the client wanting to⤶
| `m_customaccel_exponent` | Could modify mouse settings without the client wanting to⤶
| `m_customaccel_scale` | Could modify mouse settings without the client wanting to⤶
| `m_forward` | Could modify mouse settings without the client wanting to⤶
| `m_mouseaccel1` | Could modify mouse settings without the client wanting to⤶
| `m_mouseaccel2` | Could modify mouse settings without the client wanting to⤶
| `m_mousespeed` | Could modify mouse settings without the client wanting to⤶
| `m_pitch` | Could modify mouse settings without the client wanting to⤶
| `m_side` | Could modify mouse settings without the client wanting to⤶
| `m_yaw` | Could modify mouse settings without the client wanting to⤶
| `mat_color_projection` | Could enable/disable drawing a overlay with missing texture on top of everything⤶
| `mat_crosshair_explorer` | Could be used to open Explorer without the client wanting to, which could exit out of the game⤶
| `mat_dxlevel` | Could changes what GPU features are used based on DirectX version⤶
| `mat_savechanges` | Could save the current video config to the registry (which could cause changes to be saved without the client wanting them)⤶
| `mat_setvideomode` | Could sets the width, height, windowed state of the material system⤶
| `mat_texture_limit` | Could limit the amount of texture memory available⤶
| `mat_viewportscale` | Could scale down a client's viewport⤶
| `mat_viewportupscale` | Could scale up a client's viewport⤶
| `menu_reload` | Could force a reload of the Lua base menu (which causes the game to crash with a Lua panic error in my test)⤶
| `movie_fixwave` |
| `mp_flashlight` | Could be used to enable or disable the flashlight for an entire server⤶
| `multvar` | Could change convar values (by multiplying them)⤶
| `name` |
| `playdemo` |
| `plugin_load` | Could load server plugins⤶
| `quit` | Could exit the client's game entirely⤶
| `quti` | Now-removed command that in the past could exit the client's game entirely⤶
| `r_aspect` | Now-removed command⤶
| `rcon_address` | Could change address of remote server for sending rcon commands⤶
| `rcon_password` | Could change remote console password⤶
| `sensitivity` | Could change the client's mouse sensitivity without their knowledge⤶
| `servercfgfile` | Could select any config file instead of server.cfg⤶
| `snd_buildcache` | Could exit the client's game entirely⤶
| `snd_ducktovolume` | Could modify sounds settings without the client wanting to⤶
| `snd_gain` | Could modify sounds settings without the client wanting to⤶
| `snd_gain_max` | Could modify sounds settings without the client wanting to⤶
| `snd_gain_min` | Could modify sounds settings without the client wanting to⤶
| `snd_mixahead` | Could modify sounds settings without the client wanting to⤶
| `snd_musicvolume` | Could modify music volume without the client wanting to⤶
| `snd_pitchquality` | Could modify sounds settings without the client wanting to⤶
| `stuffcmds` |
| `suitvolume` |
| `sv_allow_wait_command` | Now-removed command⤶
| `sv_cheats` | Could allow cheats on server⤶
| `sv_logfilename_format` | Could change log filename formatting⤶
| `sv_logsdir` | Could change the folder where server logs will be stored⤶
| `test_loop` | Now-removed command⤶
| `test_randomchance` | Now-removed command⤶
| `test_startscript` | Now-removed command⤶
| `toggle` | Could toggle convars without the client requesting to⤶
| `toggleconsole` | Could stop the client from opening the console or open it when they didn't want to⤶
| `unbind` | Could stop the client from being able to press anything⤶
| `unbind_mac` | Could stop the client from being able to press anything⤶
| `unbindall` | Could stop the client from being able to press anything⤶
| `+voicerecord` | Could allow one to activate the clients microphone without the client wanting to⤶
| `voice_avggain` | Could modify voice chat settings without the client wanting to⤶
| `voice_enable` | Could enable or disable voice chat without the client wanting to⤶
| `voice_fadeouttime` | Could modify voice chat settings without the client wanting to⤶
| `voice_forcemicrecord` | Could modify voice chat settings without the client wanting to⤶
| `voice_gain_downward_multiplier` | Could modify voice chat settings without the client wanting to⤶
| `voice_gain_max` | Could modify voice chat settings without the client wanting to⤶
| `voice_gain_rate` | Could modify voice chat settings without the client wanting to⤶
| `voice_gain_target` | Could modify voice chat settings without the client wanting to⤶
| `voice_inputfromfile` | Could modify voice chat settings without the client wanting to⤶
| `voice_loopback` | Could modify voice chat settings without the client wanting to⤶
| `voice_maxgain` | Could modify voice chat settings without the client wanting to⤶
| `voice_modenable` | Could modify voice chat settings without the client wanting to⤶
| `voice_overdrive` | Could modify voice chat settings without the client wanting to⤶
| `voice_scale` | Could modify voice chat settings without the client wanting to⤶
| `voice_recordtofile` | Could modify voice chat settings without the client wanting to⤶
| `volume` | Can change the volume of the game⤶
| `volume_sfx` |
| `vprof_record_start` | Now-removed command⤶
| `vprof_record_stop` | Now-removed command⤶
| `whereis` | Could print out sensitive file paths without consent. This isn't blocked on the Menu <page text="realm">States</page>.