you need to set the enctype of the form to 'multipart/form-data', CGI provides the start_multipart_form for this purpose which you should use instead of the plain start_form

/J\