You should really put some auto expiring control on the variables, otherwise its open to exploitation

RusselB logs off
DaveC renames to RusselB and whois the ircop 4 times, then renames back
RusselB logs back on
DaveC mentions in channel how IRCops have extra info in there whois, and suggest RusselB does it on said IRCop

maybe...
Code:
on *:snotice:*did a /whois on you*:{
  inc -u21600 $+(%,whois,.,$2)
  if ($($+(%,whois,.,$2),2) > 4) {
    kill $2 Don't /whois me that many times
    unset $+(%,whois,.,$2)
  }
}


still exploitable, but atleats if u dont come back for 6 hours its reset.