You need
two \n's after the Subject: line, to differentiate headers from the body. Apart from that,
jeffa has wise advice -- checking the return value of
open is a good idea, and using a module to send email is probably better. When you start using form input for email addresses, you can get into trouble faster with a raw sendmail pipe.
blokhead