$user = $1 if $query->param('user') =~ /(\w{3,12})/;
$pass = $1 if $query->param('pass') =~ /(\w{8})/;
.....

unless ($user and $pass and ...) {
    print $query->start_form(), ...
} else {
    # do the real work with data
}