as pointed out above, but I would also recommend you look for a different method of making the filename. Preferably using some non-identifying data like a seq number and then tracking that to the user name. (e.g. what if someone changes their name? get married?)