#!/bin/perl -T use CGI; use Data::Validate ':math'; my $q = CGI->new(); foreach my $p ( $q->param ) { my $val = $q->param($p); if ( defined is_alphanumeric($val) ) { $q->param(-name=>$p, -value=>is_alphanumeric($val)); #untaint! } else { warn "Parameter '$p' is not alphanumeric!" } }