That's fair enough, but I think we had moved on to a more general discussion on the issues involved in accepting a file name from a user. I was just pointing out that the fact that the files you were uploading were images made no difference to the general security issue involved. As you trust all you users this obviously won't be a problem anyway.