What about using strict, warnings, taint ?

(Not to mention CGI)

I wouldn't call this code "cool" at all.