Nik, you're using param(), so I imagine you're using CGI. If that's the case, then why don't you just import cookie() and check it? It'll do your splitting and decode URL-encoded values for you.