use CGI; # or die

It can take care of both the form writing and the query parsing.

It also doesn't care whether you use POST or GET. The choice is based on a few secondary properties. GET is always unencrypted and the data shows up in your request log.

After Compline,
Zaxo