handle nefarious file/folder names

Handle names that mimic query parameters: e.g. name & copy = 5. Note
that there will still be some names that cannot be recognized. i.e. ones
that include what looks like image processor query parameters.