in reply to Can we top this security problem?

BTW, just for those who may not know...

The PHP programmer meant to do this:

my $query = new CGI; $query->import_names('R'); print $R::ParamNameFromCGI; # or whatever

Russ
Brainbench 'Most Valuable Professional' for Perl