I think you forgot to specify the encription type inyour form...try<html:form action="/yourAction" method="POST"enctype="multipart/form-data">in the form tag.