You need to read the section "Processing a file upload field" in the documentation of CGI, where you get detailed guidance. In particular, the param method gives you the name of the file at the client's side. You don't have a file on the server at that time, so you can't check its size with -s.

Once you have fixed your form processing code, you might also want to check what you are actually printing to your OUTFILE handle.