Well, they _did_ ask for "<idparm>", but maybe they'll say oops they meant "idparm" ? Let's throw 'em some additional pointers and say m/<([^>]*?)>/ will get what's inside the '<' '>' pair.
And yes, the "use CGI; or die" crew hasn't weighed in yet. (I'm a light-weight and don't count, but ... Hey, why aren't you using CGI.pm?)