>Won't that escape data twice?

Yup, just discovered that. Your solution appears to work correctly, with the corresponding unescaping being:

decode("UTF-8", uri_unescape($req_string))
[download]

Thanks for this.

I think I'll go and hit myself with a stick now. It'll be less pain than doing UTF-8 in Perl ...

Steve Collyer