It's been beaten to death, here, and in comp.infosystems.www.authoring.cgi.

We even recently had a discussion on whether the QUERY_STRING made sense for POST method form data.

Your code fails on multiple-select and checkbox form elements, and is subject to denial-of-service attacks, and doesn't support alternate delimiters for form data.

-- Randal L. Schwartz, Perl hacker