oktw says to #ysitd
<a>'.$savepath.htmlspecialchars($_POST['filename'])."</a>"; } ?>