I can't tell without trying to run this code, but I notice your form has no enctype

$ perl -MCGI -le " print CGI->start_form
<form method="post" action="http://localhost" enctype="multipart/form-
+data">
[download]

Might be mportant , might not