This is untested, but perhaps you need to specify enctype="multipart/form-data" in your <form> declaration?

    --k.