Thank you for the advice, massa. I'm using the strict pattern matching that you suggested, modified for my specific application. There are other measures that would have to be defeated before someone could access this page, but I'll keep the taint checking too!
It was very kind and generous of holli to offer to hack my site, but not necessary, thanks.