although apostrophes and ampersands are valid in file names on Windows systems, they are not valid file names on the web and should be avoided.
you can strip those characters on file upload using the following code on your upload page:
<?php
if(isset($_FILES)) {
foreach($_FILES as $k => $v) {
$_FILES[$k]["name"] = str_replace(array("&","\\","'"),"",$_FILES[$k]["name"]);
}
}
?>