Josh,
It looks OK to me. You just need to make sure that whatever the user types in the various fields is not too long and is composed only of accepted characters. This means adding a couple of regexp checks in the Perl code of the "send first message" interface.