You have a line use CGI at the top of your code then follow it with a hand parsing routine. Do you know what CGI does? You also call open on untainted user data which means that I could run arbitrary commands on your box using your script. Could I recommend Ovid's CGI course to you. There are some really important things you need to know.

cheers

tachyon

s&&rsenoyhcatreve&&&s&n.+t&"$'$`$\"$\&"&ee&&y&srve&&d&&print