`urlencode()` the filenames because, uh, duh. (C'mon, you know better.)