[% USE HTML %]
<form method="post" id="create_new_form" action="gl.pl">
 <input name="callback" type="hidden" value="[% HTML.escape(callback) %]">
</form>