>>>>> "Brett" == Brett W McCoy <[EMAIL PROTECTED]> writes:
Brett> Duh... escaping isn't what you need, since you're probably
Brett> doing this as a post. You should put your variable in quotes
Brett> (which is what you should be doing anyway):
Brett> <INPUT TYPE="hidden" NAME="var" VALUE="$var">
But that'll fail if $var contains quotes or ampersands.
Escaping *is* what you need, but not URI-escaping. You want
HTML-entitizing.
Or simpler yet:
use CGI qw(hidden);
print hidden("var", $var);
Done. :)
--
Randal L. Schwartz - Stonehenge Consulting Services, Inc. - +1 503 777 0095
<[EMAIL PROTECTED]> <URL:http://www.stonehenge.com/merlyn/>
Perl/Unix/security consulting, Technical writing, Comedy, etc. etc.
See PerlTraining.Stonehenge.com for onsite and open-enrollment Perl training!
--
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]