my $tainted_selection    = $q->param( 'Selection' )    || ''; # select
my $tainted_urbanization = $q->param( 'urbanization' ) || ''; # hidden
my $tainted_firm         = $q->param( 'firm' )         || ''; # hidden
my $tainted_address      = $q->param( 'address' )      || ''; # hidden
my $tainted_address1     = $q->param( 'address1' )     || ''; # text
my $tainted_address2     = $q->param( 'address2' )     || ''; # text
my $tainted_city         = $q->param( 'city' )         || ''; # text
my $tainted_state        = $q->param( 'state' )        || ''; # select
my $tainted_zipcode      = $q->param( 'zipcode' )      || ''; # text
my $tainted_submit       = $q->param( 'Submit' )       || ''; # image