If you just need to share the query object everywhere, it might be easier to just make it accessable from everywhere. Instead of:

my $q=new CGI;
[download]

Use 'use vars qw($q)' or the 5.6 construct our:

our $q=new CGI;
[download]

Then in the module, refer to the variable by its fully-qualified package name:

$main::q
[download]

Purists will maintain, however, that you should just pass it around. Pass $q to create_at_job as well as to print_at_job. (_untaint seems to have the same problem.)