Comment by unlinker

Of course, you don't take for granted what the client says. You generate your own file name.