Don't forget that Riamus used the ? as location part, so that could never occur, unless you replaced <user1> with <Riamus2>. Although I see your point, the matching could be stricter to try to minimize the amount of false positives, however it will never be 100% certain that you don't ban people who are simply reporting a $decode() spam in pm to the user that's hosting this script.
