my $name= $p->param('name')||'';
if ($name =~ /^([a-zA-Z0-9]+)$/) {
        $name = $1;                     # $data now untainted
    }