Hai
First thing u have to do is check
<form method="post" enctype="multipart/form-data" action="filename.cgi">
Some browsers pass the whole path to the file, instead of just the filename, so it's a good idea to strip off everything that includes backslashes (Windows browsers) and forward slashes (Unix browsers) and which might appear before the filename:
$filename =~ s/.*[\/\\](.*)/$1/;
check for the filename
use binmode if the file is a binary file
--prasanna.k