It sounds like you have both snippets of code in the same script, in which case, your program logic is a bit off (the user isn't given a chance to supply the filename). What I usually do in this type of situation is use hidden fields. I'm not sure offhand how to do that with CGI.pm, but something like so:

print '<INPUT TYPE="HIDDEN" NAME="PROCESS" VALUE="PARTTWO"><BR>';
[download]

Then in your script, you check if the script is being processed for someone that is just coming to your program for the first time or if they hit submit and using your program to process their input.

if ( param('PROCESS') ) {
 # They're using your form to process their input...
 # Now you can check if the filename is given
 if (!defined($report)) { die ...; }
} else {
 # They're using your program for the first time
 print "7.) What do you want to name ...";
}
[download]

HTH,

Jason