What does your HTML page look like? The tutorial uses:

my $tainted_username = param( 'username' ) || '';
[download]

but your code reads:

my $username = param( 'login' ) || '';
[download]

Does the HTML form set the variable username or the variable login? Those must match.

If things get any worse, I'll have to ask you to stop helping me.