Put file-creating fopen() calls in content-scanning code in a wrapper