failsafe uploading; decode filenames