You could do it with a signed
applet I suppose. There's no HTML/Javascript trick you can use to get access to the user's file system (beyond the browser sandbox) without the user agreeing to waive most of their browser security settings. A signed applet gives you access to the user's file system, assuming they agree to allow this when they download the applet.