$read and /timer were used in the original script and both evaluate their contents. If the events were defined with a wildcard channel match instead of static text $chan would also need to be sanitized when passed to the timer.
http://en.wikichip.org/wiki/mirc/msl_injection So, recommendations on a quote system that works in a similar fashion that's safer to use? I would also be interested in Google Doc integration if that's possible, but if not, I'll just update things manually.
