Nevermind, I tried exactly your code (rather then my variation of it) and it seems to work (at least the untain part of it):

    my ($untained_file) = $name =~ /^(\w+)$/ or die "bad filename: $na
+me";
    open (FILE,">c:/apache/htdocs/directory/tmpl/$untained_file.tmpl")
+;
        print FILE $content;
    close(FILE);
[download]

but oddly, now I'm getting:
print() on closed filehandle FILE at filename.cgi line 117. on the:

print FILE $content;
[download]

line.

Will mess around with it, and see if I can figure out what's up.

Thx again.