Thanks Nancy, et.al.
I guess I wasn't specific enough - I do not want the user to be able to enter any special characters either! If I just use "!" then things like *$&@#^)#!% are allowed and I will have to censor my file names! :-)