You should use the 'n' switch for $read() else people will be able to do:
Code:
!loan $findfile(.,*,1,quit) pwnt

And the bot quits IRC.
Since the command is public, that is a big problem smile