I've seen similar questions before, which ends up with no solution, because of security reasons.
But today I see hostmonster has successfully implemented this when I opened a ticket and attached a file in their backend.
It works both with firefox and IE(version 8 to be exact).
I've verified it's exactly client side scripting; no request is sent(with firebug).
