Read this it is important, even if you don't like me. I have been tipped off to this by the garrys mod group that I help run. Check out the link to see it:

http://www.firesforums.com/viewtopic.php?f=3&t=198

If that doesn't work here is a quote:

"A new Source Engine exploit has recently been discovered and will likely fall into the wrong hands. The exploit concerned could allow an attacker to download or upload files to any Garry's Mod or L4D2 server of their choice."


The gmod servers I help run have already been hit. Hackers can use this glitch to do anything from banning you from servers to transferring spyware and viruses DIRECTLY to your machine.

Now I just heard this and I cannot find an official statement from Valve yet but until then stay off of all source engine games ESPECIALLY L4D2 and GMOD until Valve has released a statement confirming the threat has been neutralized.

You don't need to shut down your servers to fix this, just turn sv_allowdownload and sv_allowupload to 0 with the new engine binaries from your Garry's Mod folder in steamapps.

Oh and stop being bad, and start using using a sv_downloadurl, unless you use one your clients will NOT download any files from your server because you disabled it.