>>>>> "Brett" == Brett W McCoy <[EMAIL PROTECTED]> writes:
Brett> Duh... escaping isn't what you need, since you're probably Brett> doing this as a post. You should put your variable in quotes Brett> (which is what you should be doing anyway): Brett> <INPUT TYPE="hidden" NAME="var" VALUE="$var"> But that'll fail if $var contains quotes or ampersands. Escaping *is* what you need, but not URI-escaping. You want HTML-entitizing. Or simpler yet: use CGI qw(hidden); print hidden("var", $var); Done. :) -- Randal L. Schwartz - Stonehenge Consulting Services, Inc. - +1 503 777 0095 <[EMAIL PROTECTED]> <URL:http://www.stonehenge.com/merlyn/> Perl/Unix/security consulting, Technical writing, Comedy, etc. etc. See PerlTraining.Stonehenge.com for onsite and open-enrollment Perl training! -- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]