You could try this.... seems a bit long now, but should do the validation you want. The consequences of a user renaming...? Pass!
<HTML>
<HEAD>
<SCRIPT language="JAVASCRIPT">
function CheckPiccy()
{
var fileName=document.UPLOADING.THEFILE.value.toLowerCase();
if ((fileName.indexOf(".gif"

== -1 ) && (fileName.indexOf(".jpg"

== -1 )&&(fileName.indexOf(".jpeg"

== -1 ))
{
alert("Please only upload a valid image file"

;
}
else
{
document.UPLOADING.submit()
}
}
</SCRIPT>
</head>
<BODY>
<FORM name="UPLOADING" method="POST" enctype="multipart/form-data">
<INPUT type="FILE" name="THEFILE">
<INPUT type="BUTTON" onClick="CheckPiccy()" value="Upload!">
</form>
</body>
</html>