You should consider running your scripts under taint mode and validating the incoming data. See perlsec and Essential CGI Security Practices for more details.

Using strict and warnings will also save you a lot of debugging time.