my $username=&filter(param("username"));