my $q = CGI->new();
# stuff
$string = $q->escape($string);

##</code><code>##

use CGI;
# stuff
$string= CGI::escape($string);