I guess I don't need to add too much commentary as most of the posts have it fairly well. However, you asked about the rest of the code:

    Print:    
    my $template_data;
    if ( $params ) {
        my @required = qw/ file_size file_type /;
        $template_data = {  
            errors          => \%errors,
            required_fields => \@required,
            # more stuff here
    }
    print $query->header;
    $template->process( 'info_request_emp.tmpl', $template_data ) or d
+ie $template->error();
    exit;
}
[download]

The only use of the goto is to skip some code. An else would have been preferred.

As for $file_name and $_file_name, this is a "sometimes" convention used here. When reading form parameters, the variable with the tainted data begins with an underscore and the untainted one drops the underscore. Obviously, if no untainting occurs, this is useless. Personally, I don't like this ad hoc approach.

Cheers,
Ovid

Join the Perlmonks Setiathome Group or just click on the the link and check out our stats.