To prevent /var being sent to the server, I will add a second check for /var as a normal command which will report an error.
Not sure that we need an error message - we quite often use /var in an editbox to provide you with examples of bugs.
It seems to me that an editbox line should be treated as an alias (subroutine) and variables treated as local variable until the editbox script terminates when they are deleted.
