use CGI; my $cgi = new CGI; $cgi->allow_param( qw(foo,bar,baz) );