fake upload (type=file) button