You can get around using glob like this:

my $dir = '/var/www/htdocs/';
opendir DIR, $dir or die "Can't open dir $dir $!\n";
my @entries = grep { /\.html$/ } readdir DIR;
closedir DIR;
print "@entries";
[download]

This said you generally need to set $ENV{'PATH'} to a known safe value to pacify taint with a line like:

$ENV{'PATH'} = '/bin:/usr/bin';

cheers

tachyon

s&&rsenoyhcatreve&&&s&n.+t&"$'$`$\"$\&"&ee&&y&srve&&d&&print