$subdomain = untaint($subdomain); $destFolder = untaint($destFolder); my $dir1 = "/home/siteName/templates/tmpl"; my $dir2 = "/home/siteName/public_html/$subdomain/$destFolder/tmpl"; my @list = <$dir1/*.*>; foreach(@list) { copy("$_","$dir2/") or die "FAIL :$! \n"; } sub untaint { my $var = $_[0]; my ($untained_file) = $var =~ /^(\w+)$/ or die "bad filename: $var"; return $untained_file; }