Command input not sanitzed

[mitchellrj]

You've got your is_valid_param method, but nothing actually calls it. So the following code would make the client quit:

client.msg('#gevent', 'just type /quit whoever, and it\'ll quit them from irc\r\nQUIT:r`heaven')