$input =~ /([a-zA-Z]+)/;
$input = $1;

##</code><code>##

$input =~ s/[^a-zA-Z]//g; # keep valid stuff
($input) = $input =~ /(.*)/; # now officially untaint it