20: $cgi->param($SID) =~ m|/\.\./| or


32: $cgi->param($SID) =~ s/[^a-zA-Z0-9]//g;