use strict;
use CGI qw(:standard escapeHTML);

my $q = new CGI;

 my $comments = $q->escapeHTML( $q->param('comments') ) || '';

print header();
print "test: $comments";