You really ought to escape the contents of whatever you pull out of the database and put into these attributes. By lack of quotes, you already experienced one way it can go wrong. But what if the database field contains a quote? Or an ampersand? As a contrived example, set 
$name = 'buy&trade&copy&paste" style="color:red';

print qq(<html><form>\n);
print qq(<input name="oops" value="$name">$name\n);
print qq(<br><input type="submit"></form></html>\n);

[download]
and display the result in a browser. Oops.

I gave one piece of code that solves this problem in a post from yesterday, Re: converting utf-8 to ISO-8859-1. If you don't have the UTF-8 problem, and I bet you don't, replace the first line in sub escape, the statement with pack, with a plain and simple 

        my $s = shift;

[download]

In reply to Re: Perl Param by bart
in thread Perl Param by Aymiee

Title:
Use:  <p> text here (a paragraph) </p>
and:  <code> code here </code>
to format your post, it's "PerlMonks-approved HTML":


  • Posts are HTML formatted. Put <p> </p> tags around your paragraphs. Put <code> </code> tags around your code and data!
  • Titles consisting of a single word are discouraged, and in most cases are disallowed outright.
  • Read Where should I post X? if you're not absolutely sure you're posting in the right place.
  • Please read these before you post! —
  • Posts may use any of the Perl Monks Approved HTML tags:
    a, abbr, b, big, blockquote, br, caption, center, col, colgroup, dd, del, details, div, dl, dt, em, font, h1, h2, h3, h4, h5, h6, hr, i, ins, li, ol, p, pre, readmore, small, span, spoiler, strike, strong, sub, summary, sup, table, tbody, td, tfoot, th, thead, tr, tt, u, ul, wbr
  • You may need to use entities for some characters, as follows. (Exception: Within code tags, you can put the characters literally.)
            For:     Use:
    & &amp;
    < &lt;
    > &gt;
    [ &#91;
    ] &#93;
  • Link using PerlMonks shortcuts! What shortcuts can I use for linking?
  • See Writeup Formatting Tips and other pages linked from there for more info.