in reply to CGI - hazardous characters

You'll have to do the checking yourself, or use a form validator module (Search CPAN for the module that suits your needs)