Replace possibly-dangerous characters in uploaded filenames with underscores, this includes spaces, colons, commas, equal signs and any byte >= 128. Previously only spaces were turned into underscores. Also shell_quote the destination for scp. Use '--' for some shell commands for safety. Use brackets around the scp destination for ipv6 support.