elsif (defined($q->param('task'))) { my $task = $q->param('task'); if ($task =~ /^([\w]+)$/) { $task = $1; # untainting } my $refname = $q->param('refname'); if ($refname =~ /^([\w]+)$/) { $refname = $1; # untainting } my $ref = "Allsys::Resource::ManMan->" . $task . "Document($refname)"; my $documents = {}; $documents->{$refname} = eval($ref); print $documents->{$refname}; }