in reply to CGI - hazardous characters
You'll have to do the checking yourself, or use a form validator module (Search CPAN for the module that suits your needs)