And fourth?

Short of re-rolling CGI.pm (which would be bad) I can't see why this isn't working; the code pretty much matches most of the samples (although I omited most of my error/taint checking in my original post)