> $fp =~ /(.*)/;
This doesn't untaint $fp. instead, you could do this: ( $fp )=( $fp =~ /(.*)/ ); To untaint a variable using this method, you need to assign the result of a regex capture to the variable, not just do a regex check Clint
> $fp =~ /(.*)/;
This doesn't untaint $fp. instead, you could do this: ( $fp )=( $fp =~ /(.*)/ ); To untaint a variable using this method, you need to assign the result of a regex capture to the variable, not just do a regex check Clint