It is my understandment that it will have just the same value, but it will be... ehm... untainted! Which is the point the OP was trying to make: first blindily untaint, then do your checks whatever way you like most, i.e. do not try to do it all in one regex. I second his approach, BTW!