my @files = map untaint( $_ ), grep -f "$dir/$_", readdir DIR;