As Ryszard said, CGI.pm is great at producing HTML, but more importantly it will reliably parse the name-value pairs sent by your form. To see how easily many parsers fall apart, read this, then take comfort in the fact that CGI.pm has been extensively tested by many people and is very good at what it does.

You should also consider using strict, taint mode, and warnings. They'll save you a lot of trouble down the road. For more information on them, consult super search :)