[Zachery]

For starters, theres no reason to ever store attachments (of any kind) in a webaccessable folder.

It seems that you retain the original filenames? Why? It would be better to store the entrys filetype in the database and pass the fileinfo back in the headers and serve the file dynamicly, much like how vB already does it.

Also, some filesystems have a limit of files/folders that they can store in a single directory, even with the /userid setting that could still get bad.

Anyreason you don't just store the files with a more useable namespace, like userid_attachid.attach ?