Thank you for your suggestion.

To do a good job using regex I think I would need to know the difference between unlink the function and $unlink the variable (it might happen!) So I would basically be building a Perl parser for the string and complaining if the parser encountered any in my list of illegal functions.

I don't think this is very difficult but is there another way of doing this that is more reliable?

Richard