Frankly, this doesn't make much sense.

if you don't want the query-string to show up in the location-field of the browser, use POST instead of GET as form-method, this has nothing to do with the cgi-script, though.

regards,
tomte

Hlade's Law:

If you have a difficult task, give it to a lazy person --
they will find an easier way to do it.