SECURITY-FIX: On upload, create temp. filename for uploaded file to prevent encoding errors and invalid filename