in reply to Web Security

Try Data::FormValidator or CGI::Untaint or CGI::FormBuilder

In Section Seekers of Perl Wisdom