Viruses in file attachments

[deleted]

I have installed imunifyAV on our server to check for problems. It has detected some issues with some Osticket file attachments which lead me to a couple of questions

We are using Osticket 1.15.4, with attachments stored in the filesystem

1) If we delete a ticket, is the file attachment also deleted?
2) Are we safe deleting an attachment manually - by which I mean Imunify gives me this link as a problem: osticket/attachments/4/4Xio1c0akWNeSfiZ56njBE8zqysesPDU.
So there is no way of tracing back which ticket this is so is it ok simply to delete directly from the server?

KevinTheJedi

@[deleted]

It should if the file is not used elsewhere in the system.
If you do this you will also need to delete all associated records in the database so that you don't get a ton of errors about "Unable to find file.". You can review the database ERDs to see how attachments/files relate to other tables.

Cheers.

[deleted]

Thanks, so it looks like there is not an easy route to find the ticket without being MYSQL expert 😉

It should not be often, but I can resort to searching the Mysql database for the file 'name', in this case '4Xio1c0akWNeSfiZ56njBE8zqysesPDU'.
Then it shows me the real file name and date and time it was created. Then in Osticket I can use advanced search based on the date to narrow down to the rogue ticket

Thanks for your help