if ($lastname =~ /^([\s\w.'-]+)$/ && length($lastname) < 28) {
                $lastname = $1;                     # $data now untainted