$user_var = quotemeta( $user_var );