In this walkthrough, I go through the available options and an example using attachment_fu to handle file uploads and image thumbnailing, and responds_to_parent to implement the iframe remoting pattern to work around javascript’s security restrictions on file system access. You can also download the complete example. This is an outdated article. I will be updating with a new article soon. Step 1.