sanetize filenames (wow, what a mess)