file path not urlencoded

file directory dies not urlencode the file names it lists, so if you upload a file with a # in the name, it will output that as-is in the url which will cause the link to be invalid. I attached a patch to fix the problem.