Your web page cannot go outside of the browser sandbox and write to a users filesystem. The best you can do is send the data with the appropriate mimetype (and filename) and hope the user is smart enough to save it where it needs to be (see Launching Excel from a CGI for sending the mimetype and setting the filename).