COD4 players can enable cheats via cvars without RCON password

[Ronny Schedel]

Hello,

players can change some cvars to enable built in cheats without RCON access. 
To prevent this add the following line to the pbsv.cfg:

pb_sv_cvar sv_cheats IN 0

Restart the pb server with pb_sv_restart.

The long story behind this in German:
http://cod.esgnserver2.de/?w=news&action=detail&id=5226&t=1

Best regards

Ronny