Another option is to check CPAN.

Please don't roll your own. The odds are you'll have a lot of trouble coming up with a secure solution.

Also, please read through the code of anything you download; make sure it uses strict, warnings, taint checking, uses placeholders for any DBI calls, uses the CGI module... Make sure the taint checking isn't just automatically untainting parameters, but is actually validating them.

Unfortunately, the list of caveats is longer than that; those are just the ones I can think of off the top of my head :(
--
Mike