Which Hijack command(s) would I use to completely disable commands ? I've read the FAQ but I don't completely understand.

The player has been doing this for a while and has only today been web exposed. It is also web exposed behind password protection anyhow.