This isn't technically possible for security purposes, so the user cannot be misled.
However, there are a couple of workarounds - take a look at http://www.quirksmode.org/dom/inputfile.html for one example.
For the record, this question has already been asked here (where I gave the same answer).