$name = param('name');
$name =~ /(\w+)/;
$safe_name = $1;  # use $safe_name from here on out