http://www.perlmonks.org?node_id=619140


in reply to Upload security question

When I need to retrieve a file, via upload forms, I always change the file name before saving on the filesystem, using String::Random and time(). If you need the original file name, keep it on a database table or in a text file.