BUG Sanitise the PHP output.

It would be easier (in future) to review these variables if you suffix the name with the encoding. E.g. `$fileNameATT`.