using $r->variable() is probably safer than using a package variable, but handle_request() will fall back to the package variable if postVariables is not a hash reference.