must contain only the characters \[a-zA-Z0-9\]