my $filename = "";
if($input{'file'} =~ /^(\w+\.?\w{2,4})$/) {
  $filename = $1;
} else {
   die "somebody is trying to do bad things";
}
# do stuff with $filename