Attachements security

ausswe

Hi all, I'm setting up osTicket (v1.9.5.1) and just read about the new plugin for Attachment Storage - and the option to store attachments outside the database in a folder. I have a question regarding security. I'm assuming (am I correct) that it's safer to store attachments in the database as they would be harder to access (the folder would be accessible I'm assuming, but set to disallow access for robots)?Or is it as safe to have attachments in a folder? And from a performance perspective might it be better to store attachments in a folder to keep the database as small as possible (to not slow down requests to the DB etc)?Thoughts and ideas?Daniel

ntozier

Q: I'm assuming (am I correct) that it's safer to store attachments in the database as they would be harder to accessA: I think so.Q: Or is it as safe to have attachments in a folder? A: I personally don't think so.Q: And from a performance perspective might it be better to store attachments in a folder to keep the database as small as possible (to not slow down requests to the DB etc)?A: I think so.