#!/usr/bin/perl -wT
use strict;
use CGI;
my $q = new CGI;

my $var = $q->param('var') || '';
untaint(\$var);

# warning do not do this
my @ary = $q->param('options') || ();
# this kills the array return of CGI.pm