Untested...

use CGI qw(:all);
$ENV{PATH} = "";
if (my ($name) = query_string =~ /(\w+)/) {
  print header, h1("Results of finger"), pre(escapeHTML(`/usr/ucb/fing
+er $name`));
} else {
  print header(-status => '403 Forbidden');
}
[download]

You might also want to consider Net::Finger.

-- Randal L. Schwartz, Perl hacker

---

updated.... (tested {grin}):

#!/usr/bin/perl -Tw
use CGI::Carp qw(fatalsToBrowser);

use CGI qw(:all); 
$ENV{PATH} = "";
if (my ($name) = param('keywords') =~ /(\w+)/) {
  print header,
    h1("Results of finger"),
    pre(escapeHTML(scalar `/usr/bin/finger $name`));
} else {
  print header(-status => '403 Forbidden');
}
[download]