Well, concerning security issues, would using \Q and \E not do plenty? The only real problem would be deciding what kind of regexes are allowed and how to enforce them... As I first stated and as belg4mit reinforced, a malicious user could come up with some regex to do so much searching... maybe even something that would kind of loop...