#! /usr/local/bin/perl -T
use strict;
use CGI qw(:standard upload);
use HTML::Entities;
print header(), start_html('Upload Test'), h1('Upload Test'),
  start_multipart_form(), "Enter how many files to upload: ",
  textfield("filecount"), br();
for my $i (1..param('filecount')) {
  print "File $i: ", filefield(-name => "file$i"), br();
}
print submit();
for my $file (sort grep /file/, param()) {
  print p();
  my $handle = upload($file);
  unless (defined($handle)) {
    if ($file =~ /(\d+)/) {
      print h3("File request $1 did not return a handle\n");
    }
    next;
  }
  print p(), h3("Uploaded $handle"), br(), "<pre>";
  print encode_entities($_) while <$handle>;
  print "</pre>";
}
[download]

Hey Tilly, I tried it, but all I could get was internal server errors. Is HTML::Entities part of the standard perl distribution? I don't have a clue why it won't work.

<form enctype='multipart/form-data' ...>
<input type='file' name='file' ...>
<input type='file' name='file' ...>  (repeat)

use CGI ':standard';
use File::Basename;

foreach (param('file')) {
   my $basename = basename($_);
   $basename =~ tr/A-Za-z0-9.//cd;    # strip out unwanted crap
   open(FILE, "> $basename") or die "$basename: $!";
   print FILE <$_>;
   close(FILE);
}
[download]

$basename =~ tr/[A-Za-z.]//cd;      # strip out unwanted crap
[download]

Did you really want to leave in the square brackets? Remember, tr is not s. {grin}

-- Randal L. Schwartz, Perl hacker