Try a replace in the reader code, something like this:

Code:

   $XMLfilename = $_REQUEST["XMLFILE"];
	  $XMLfilename = str_replace("***","?", $XMLfilename);
    } else {
      // It is local and must be in the same directory
      $XMLfilename = basename($_REQUEST["XMLFILE"]);
	  $XMLfilename = str_replace("***","?", $XMLfilename);