my $tainted_username = param( 'username' ) || '';

##</code><code>##

my $username = param( 'login' ) || '';