bad filename - hacking prevent