From 087bcfab2ce06f6a92e7ea045a10c81c67320658 Mon Sep 17 00:00:00 2001
From: Snipe <10562121+pushkart2@users.noreply.github.com>
Date: Wed, 15 Jul 2026 22:01:25 -0500
Subject: [PATCH] fix: enable secure network event defaults

---
 misc.cfg | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/misc.cfg b/misc.cfg
index 77245ff..da81344 100644
--- a/misc.cfg
+++ b/misc.cfg
@@ -26,12 +26,12 @@
 # Used to block REQUEST_CONTROL_EVENT routing based on a configurable policy. Find more info here: https://docs.fivem.net/docs/server-manual/server-commands/#sv_filterrequestcontrol-mode
 # Default: 0
 # Type: int
-# set sv_filterRequestControl 0
+set sv_filterRequestControl 1
 
 # Used if sv_filterRequestControl is set to 1 or 3. Allows you to set after how long (based on entity creation time in milliseconds) an entity should be blocked from a REQUEST_CONTROL_EVENT
 # Default: 30000
 # Type: int
-# set sv_filterRequestControlSettleTimer 30000
+set sv_filterRequestControlSettleTimer 30000
 
 # Used to prevent users from using modified client files. See: https://docs.fivem.net/docs/server-manual/server-commands/#sv_purelevel-level
 # Default: 0
@@ -41,17 +41,17 @@
 # Used to prevent users from routing NETWORK_PLAY_SOUND_EVENT through the server, which is commonly used by malicious actors. This is set to true by default (allow routing)
 # Default: true
 # Type: boolean
-# set sv_enableNetworkedSounds true
+set sv_enableNetworkedSounds false
 
 # Enabling it (by setting it to true), will allow users to route REQUEST_PHONE_EXPLOSION_EVENT through the server. The main drawback behind enabling this, is that it can also be used by malicious actors.
 # Default: false
 # Type: boolean
-# set sv_enablePhoneExplosions false
+set sv_enableNetworkedPhoneExplosions false
 
 # A boolean console variable introduced in server version 8540 that can be used to prevent users from routing SCRIPT_ENTITY_STATE_CHANGE_EVENT through the server, which is commonly used by malicious actors.
 # Default: true
 # Type: boolean
-# set sv_enableNetworkedScriptEntityStates true
+set sv_enableNetworkedScriptEntityStates false
 
 # Any profile settings can be enforced by the server by using setr to replicate it to the client.
 # All possible settings can be found in your own FiveM installation at "C:\Users\user\AppData\Roaming\CitizenFX\fivem.cfg"