$unique_name = uniqid('');
move_uploaded_file($tmpname, $dir."/".$unique_name);
//save the file
- $filename = $_FILES['filename']['name'];
+ $filename = basename($_FILES['filename']['name']);
$filesize = $_FILES['filename']['size'];
$filetype = $_FILES['filename']['type'];
}