As far as I remember in CGI inputs -values takes an array ref if you want to have multiple values. Order is preserved.
As an aside you should always run a CGI script with -T, particularly if you are letting params near the filesystem.