Until now the filenames are used 1:1 from the upload form to the filesystem.
They should be parsed for illeagal characters before saving
Log in to post a comment.