Also, I have created a simple test form that calls process.php, and posts cmd=download and val1=readme.txt. When I do that process.php returns the contents of process.php, so I think process.php is finding the file correctly.
I did have to change the upload_dir to 'upload/' rather than 'upload', butte problem persists.
What am I missing?