Just an observation:

If you only use one CGI query object you can use the default CGI object by invoking something like:

use CGI qw(:standard);
[download]

Then you don't have to use the $q-> object:

print $q->header;

becomes

print header;
[download]

If you know what methods you'll be using you can import them individually:

use CGI qw(param header url);

my $url = url();
[download]