You're not matching for the "/XX" part, and the second regex also matches whatever the first matches.

A relatively simple (and too permissive) regex would be:

if ($qs =~ /^[a-zA-Z0-9][a-zA-Z0-9\.\-_]*(\/\d+)?$/) {
  # do stuff with $qs
}
[download]