$q->param('varname', untaintit($q->param('varname')));