-% $error ||= $access_user->replace( { map { $_ => scalar($cgi->param($_)) }
-% qw( menu_position ) #XXX autogen
-% }
-% );
+% my %param = $access_user->options;
+%
+% #XXX autogen
+% my @paramlist = qw( menu_position
+% email_address
+% vonage-fromnumber vonage-username vonage-password
+% show_pkgnum show_db_profile save_db_profile
+% height width availHeight availWidth colorDepth
+% );
+%
+% foreach (@paramlist) {
+% scalar($cgi->param($_)) =~ /^[,.\-\@\w]*$/ && next;
+% $error ||= "Illegal value for parameter $_";
+% last;
+% }
+%
+% foreach (@paramlist) {
+% $param{$_} = scalar($cgi->param($_));
+% }
+%
+% $error ||= $access_user->replace( \%param );