Did you set enctype='multipart/form-data' on the form tag? ie. form tag should look something like this:

<form method="post" enctype="multipart/form-data" action="myscript.cgi
+">
[download]