Attachments Not in Database

This is a hack which allows you to save the attachments as files and not within the database. The main problem with this was the fact that it posed certain security issues, these have been tackled by doing the following

• Placing the folder below document root
• Using random hashes to name the file
• Changing the file extension to .file
• Never divulging the path to the file

This is a beta hack, it has been tested on a development board. I have had insufficent time to fully complete the attachment importer, this removes the files from the database and creates them as physical files in the attachment folder. I will post this as soon as possible.

Looking forward to your feedback.

Scott

To install this hack upload this file to the admin directory and then view it in your browser.

All the changes that Jawelin suggested have been applied, thanks man

[Jawelin]

Probably new bug found...
I can't understand exactly where, but ....
I had some problem about deleting thread (from Admin combo or editing the first post within with delete flag) when it doesn't contain attachments.
--> see here

I think there's some problem in function deletethread() [admin/functions.php file...], because removing the code

PHP Code:

      $attachid = $DB_site->query("SELECT attachmentid FROM attachment WHERE attachmentid IN ($attachmentids"."0) AND NOT attachmentid IN ($omitattachmentids"."0)");
      while($attachids = $DB_site->query_first($attachid)) {
        removeattachment($attachids['attachmentid']);
      } 


everything works fine.
Have you ever tried to delete a thread without attachments ?

Thanks.
Bye

[Scott MacVicar]

your right
while($attachids = $DB_site->query_first($attachid)) {
should be
while($attachids = $DB_site->fetch_array($attachid)) {

[Scott MacVicar]

daniel we're currently finishing the testing of this hack i've still to do some updates on it though, will do them soon.

[Ninth Dimension]

OK, I tried to install it and got the errors that I listed above. I've now reverted back to a back up copy of the site, but as soon as this hack is up and running correctly then i'll totally be installing it

[Jawelin]

Originally posted by PPN
your right
[...]!!!

Great! Less than 2 hrs to findout and fix !
Elsewhere ?
Thnx

[Jawelin]

Great! Checked and applied all your updates (w/ Araxis Merge... )

Just a curiosity (didn't found on php.net): what's the meaning of the '@' symbol in front of @chmod ("$path", 0666); ?
Thanks

[Scott MacVicar]

it supresses errors, as chmod doesn't exist on NT systems and can sometimes produce an error, You can do this with all php functions to supress errors.

[Jawelin]

Ah, of course...
The same as in NT batch files, to suppress output... (@echo off... etc.)
Php any day more seems an O.S. itself...
Thanks

[Destee]

Looking forward to the release of this.

[Jawelin]

Originally posted by Destee
Looking forward to the release of this.

Uh ?!? Lose something ?
---> Post #1