[cobalt-users] potential cgi vulnerability?

["Craig Martin" <Craig@xxxxxxxxxxxxxxx>]

let's say I have a simple submission form
a field is entered and sent to my cgi

I later use this field as part of a command-line operation

despite the fact it is url-encoded
am I vulenerable to any hack?
can somebody subvert the contents of that
field submit so that rogue statements are executed on
my commandline?

or is url-encoding enought to prevent this?

Craig