Added pun_htmlspecialchars() on the output of the filenames