get_data cgi escape