##
if ($data =~ /^([-\@\w.]+)$/) {
$data = $1; # $data now untainted
} else {
die "Bad data in $data"; # log this somewhere
}
####
> #By the way when I tried to use
> #$nameoffile=$query->param('nameoffile'); it returned the
> #error "..param must be part of some structure..."
####
param('nameoffile')