LUA exploiting is something garrysmod been target of alot recently so go read at this page
And to have cl_allowdownload 0 & cl_allowupload 0 in your autoexec will prevent downloading such things from the server but also prevents everything else like downloading new maps, sounds, small mods.