Taint check. It is the only way.™

my $param = $q->param("text") || ''; #for example...
if($param =~ /^([\w\s]+)/){ # modify as needed
    $param = $1;
}
else{
    return 0; # or die, or croak, or warn, or something!
}
[download]

John J Reiser
newrisedesigns.com