I did the prepend thing, actually, and it was useful (especially since everyone's file was called my_application.doc).
But I left in the hidden field in the form nevertheless.
I believe that the prepended date comes from our server and that the final application actually arrived after the deadline (I took the form down but he must've had the webpage open still).
... but I need to confirm that the hidden variable comes from the client's computer/server like other hidden variables. I can't actually find any evidence to this effect.