my $shipcountry;
# shipcountry may contain letters, digits, underscores, spaces and dashes
# and nothing else
if ($FORM{'shipcountry'} =~ /^([\w -]+)$/) {
  $shipcountry = $1;
}
else {
  print "$htmlheader Invalid input for shipping country detected!\n";
}
print {$fh_write} "$date\| $ENV{'REMOTE_HOST'}\| $ENV{'HTTP_USER_AGENT'}\|$FORM{'discnt'}\|$shipcountry\|\n"
  or "$htmlheader Can't write to $reffile(r): $!\n";