in reply to %ENV is returning a blank
I am not sure where the problem lies...
Find out how QUERY_STRING works and you'll have your answer