File Helper and Canonicalization issues

[eluser]WanWizard[/eluser]
We use option 1 as well.

After upload we store the original filename in the database, with a link to the file with random name on disk. We use the stored name for display purposes, and if the file is downloaded, that name is used as well.

The fact that we use a random name internally is completely hidden from the users.