param returns a filehandle for an upload field:

my $upload = param('file');
my $data   = do { local $/; <$upload> };
[download]

Really no need to try to reopen it from the filename.