Variable names should be prefixed with the namespace of the module, so calls to variable_get('attempts') should be variable_get('user_disable_attempts'). All variables are stored in the same table, so namespace prefixing prevents collisions between modules.