my $LastName=param('LastName'); # pattern should match sql field requirement if($LastName =~ /^([\w\s]+)$/){ $LastName = $1; }else{ print invalid search request .html } my $reqpage= param('reqpage'); if($reqpage =~ /^(\d+)$/){ $reqpage = $1; }else{ print invalid page request .html }