$var = $tainted_thing;