Attachments Not in Database

This is a hack which allows you to save the attachments as files and not within the database. The main problem with this was the fact that it posed certain security issues, these have been tackled by doing the following

• Placing the folder below document root
• Using random hashes to name the file
• Changing the file extension to .file
• Never divulging the path to the file

This is a beta hack, it has been tested on a development board. I have had insufficent time to fully complete the attachment importer, this removes the files from the database and creates them as physical files in the attachment folder. I will post this as soon as possible.

Looking forward to your feedback.

Scott

To install this hack upload this file to the admin directory and then view it in your browser.

All the changes that Jawelin suggested have been applied, thanks man

[Destee]

Ohhh I guess I meant the full release ... like not still beta.

[Jawelin]

Originally posted by Destee
Ohhh I guess I meant the full release ... like not still beta.

Oh, sorry!
Actually I think the moving is only a forum-related problem, not the hack's state-of-the-art... :up:
Again...

[Destee]

Well Thank You!!

I really need this one. I'll go ahead and test it out for myself. I usually like to wait until things are "final" as my skill set can't handle much!

Thanks Again.

[waddy]

An excellent idea and an excellent hack..... will save many database strains

I tried this on a win2K server ... the install went perfectly but when i try to test :

I also get this error

Warning: Unable to create 'wwwroot uke\attach/994be6417c0dcfc35596e16e4e26af13.file': Invalid argument in C:\Inetpub\wwwroot\nuke\forum\admin\functions.php on line 1601

Warning: Unable to move 'C:\PHP\uploadtemp\php54.tmp' to 'wwwroot uke\attach/994be6417c0dcfc35596e16e4e26af13.file' in C:\Inetpub\wwwroot\nuke\forum\admin\functions.php on line 1601

Warning: stat failed for wwwroot uke\attach/994be6417c0dcfc35596e16e4e26af13.file (errno=2 - No such file or directory) in C:\Inetpub\wwwroot\nuke\forum\admin\functions.php on line 1605

I have set the permissions on the directory to allow everything ... and suggestions please

[UserName]

Thanks for all the hard work on this hack.

We have a big vB with a lot attachments. I'd like to know if there are people who have installed this hack without any problems?

We are usually the last to switch or add something new, because we want to learn from other people's mistakes!

Thanks again!

[Scott MacVicar]

your path to move it to is set wrong within the admin panel, as i wrote this on a Win 2k server

[auto]

Scott, you may remember how I tried the script and it totally filled /var to the top. If I try the script now, will this still happen?

Thanks for your help.

[Sean]

I installed it, and it works great... One problem though, if you try to download WITH the session hash..(attachment.php?s=881293bn832048324n42304&po stid=400) then you get an "invalid attachment id error." When you delete the hash...(attachment.php?s=&postid=400)...It works fine and dandy..Should I just get rid of the hash for all the links, or something? Or did I forget to modify something?

Thanks,
Sean

[Scott MacVicar]

ok thats an odd one, there was no changes made to attachment.php which would affect the line which checks the attachmentid verification, especially nothing which involves the session hash.

I'll go test it now on my dev board.

[Sean]

Alright, thanks.

One other thing I did notice, was that mods could download it.. But maybe that's because they don't have a session hash? I will have to find out.

Thanks.