our $lastname = $INPUT->param('lastname'); if ($lastname =~ /^[\s\w.'-]+$/ && length($lastname) < 28) { $lastname = $1; # $data now untainted } else { our $error_msg_xxx = '