I guess this is easier than using a temp variable (I know, I'm using a condition - but I had missed that part of your question on my first posting). if [ "$name" !> "${name%%+(;|:)*}" then echo "Invalid character!" fi In the meantime I echo Jonathan's question. I also tested this and was unable to make the exploit work. It simply echoed what I typed, semi-colon and all. Jacques b. -- fedora-list mailing list fedora-list@xxxxxxxxxx To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list