Those additional name-values pairings are in the action property :

<form name="something" action="somescript.pl?name1=value1&name2=value2
+"....>
    <input type="hidden" name="productID" value="199132908390" />
    <input type="submit" name="something".... />
</form
[download]

I have a bunch of name-value pairings in the action property but also hidden fields and such within the form tag section. Initially I thought everything went into the CGI object, really first time needing both like this. Also, does the CGI module handle getting rid of anything nasty that could be written in form fields that could cause problems in a script? I don't use any eval or anything like that on user supplied data but I was wondering if there are any additional security measures I should take. Thanks for the reply.