Another way is to generate (perhaps with Data::UUID) a safe filename (ex fooBAR), and create associated metadata file (fooBAR.meta) that contains uploaded name, uploader ...