only rely on uniqid() for the filename