http://qs321.pair.com?node_id=558829


in reply to zapping gremlins

Use a module or even CGI's escapeHTML() function perhaps.