That's precisely why people ought to be using CGI.pm instead of cgi-lib.pl.

How much debugging time was spent on this issue? My instinct is that the time that it would take to port this over to CGI.pm is small, in comparison.

What might happen in the future when someone else has to maintain this code? The alternative is a simple: my @sites = $query->param('sites');