for (glob ("$upload_dir/$in{'imgid'}.*")) { unlink($_) or die("Can't delete file $_: $!\n"); } #### use Scalar::Util qw( tainted ); die("Tainted") if tainted($upload_dir) || tainted($in{'imgid'}); for (glob ("$upload_dir/$in{'imgid'}.*")) { unlink(/(.*)/s) or die("Can't delete file $_: $!\n"); }