my @safe_vars = qw( name address phone age );
...
@names = $q->param;
foreach $name(@names){
    if ( grep { $_ eq $name } @safe_vars ) {
        $$name=$q->param($name);
        #print $name, ': ', $$name, '<BR>';
    }
}