$text =~ s/value="(.*?)"/'value="'.$query->param($1).'"'/eg;