>>>>> "Brett" == Brett W McCoy <[EMAIL PROTECTED]> writes:

Brett> Duh... escaping isn't what you need, since you're probably
Brett> doing this as a post.  You should put your variable in quotes
Brett> (which is what you should be doing anyway):

Brett> <INPUT TYPE="hidden" NAME="var" VALUE="$var">

But that'll fail if $var contains quotes or ampersands.

Escaping *is* what you need, but not URI-escaping.  You want
HTML-entitizing.

Or simpler yet:

    use CGI qw(hidden);
    print hidden("var", $var);

Done. :)

-- 
Randal L. Schwartz - Stonehenge Consulting Services, Inc. - +1 503 777 0095
<[EMAIL PROTECTED]> <URL:http://www.stonehenge.com/merlyn/>
Perl/Unix/security consulting, Technical writing, Comedy, etc. etc.
See PerlTraining.Stonehenge.com for onsite and open-enrollment Perl training!

-- 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to