You can't upload via XMLHTTPRequest. 
Javascript does not have
access to local files on your computer for security purposes.
Take a look at this post:
You can use an Iframe for stuff like this.
Keep up to date with Rails on Twitter and This Week in Rails
Policies: Conduct, License, Maintenance, Security, Trademarks