$read should always be used with the 'n' switch to prevent evaluation of its contents, especially if that content comes from an external source. Timers may also be exploited, see this page:
http://en.wikichip.org/wiki/mirc/msl_injection
Last edited by Loki12583; 07/02/16 10:44 PM.
