in reply to Re^11: file upload and IO::Handle
in thread file upload and IO::Handle

my ($sessid) = $ENV{QUERY_STRING}; Are you using taint checking (#!/usr/bin/perl -T --)? sessid could contain evil characters....