handled illegal characters in uploaded filename