my $user = <STDIN>;
chomp $user;
open (HAND, "mysql -u $user") or die "error $!";
     # if $user = "fred; rm -rf *;" then your script will
     # try very very hard to remove everything in its    
     # working directory.