This is at least a syntactical valid way of untainting the data, but I do not know whether it's semantically correct. That depends on how the data is used. And do yourself (and all readers of your code), don't backwack everything. Only use a backslash when it's really needed. Like this:

    if ($s =~ m{^([-\w \@(),./]+)$}) {
[download]

Abigail