my $app_base = $ENV{AppBase};
if ($app_base =~ m{^(/var/www/[^/]+)$}) {
    $app_base = $1; # $app_base no longer tainted.
}
my $logfile = catdir($app_base, 'mylogfile');