The SendMessage() feature is really a security problem in miRC, because all applications can send what they want and there is no way to disable this.

There should be the possibility to disable SendMessage() feature (default set to OFF, to stop IRC worms for example) and maybe an event to control commands executed by SendMessage() or via DDE (where $1- is the code or something like that), so the user can control/log this.