added gsub to escape \ since CGI escape doesn't seem to work