Security fix: Never suggest out-of-scope filenames in get_sugested_filename()
check_range(): Always return True on invalid range_format