my $action = param('action'); 
if ($action) {$action =~ s/[^a-zA-Z0-9_-]//g;} 
unless ($action) {$action = 'home';}