sanitized files for uploading