cleaning up invalid characters in file upload path