Okay, is there something wrong with the way I'm doing it now?

If you have to ask, its safe to assume the answer is yes :)

your posted code doesn't do any form of encoding/escaping,

use CGI or die;

use CGI or die;