Thanks,
I am also validating the file type but I also wanted to make sure they weren't using unacceptable characters.
Since there's a problem with the Client Validation tool and IE, I think I'll use preg_replace to correct the invalid characters. That way, the visitor won't need to be prompted to correct their entry.