Thanks for the suggestion. I've untainted my input.

I never use taint mode because I don't maintain a public http server (all my scripts are single-user only and behind a firewall), but I guess that doesn't really help other people who download my code and have it exploited. Please let me know if you think there's still a problem.

I think you're permitting too much. I'd write:

  ($node) = $node =~ /\w{1,32}/g;
[download]

Remember. Be paranoid. They are out to get you :)

   MeowChow                                   
               s aamecha.s a..a\u$&owag.print

I limited size between 1 and 32 as per your example, but I can't let go of my limited punctuation. Do you know where I can find the ext2 filesystem specifications for filenames?

-the Pedro Picasso
(sourceCode == freeSpeech)