Attachments Not in Database

This is a hack which allows you to save the attachments as files and not within the database. The main problem with this was the fact that it posed certain security issues, these have been tackled by doing the following

• Placing the folder below document root
• Using random hashes to name the file
• Changing the file extension to .file
• Never divulging the path to the file

This is a beta hack, it has been tested on a development board. I have had insufficent time to fully complete the attachment importer, this removes the files from the database and creates them as physical files in the attachment folder. I will post this as soon as possible.

Looking forward to your feedback.

Scott

To install this hack upload this file to the admin directory and then view it in your browser.

All the changes that Jawelin suggested have been applied, thanks man

[Dade]

Man oh man, thanks!

[MrLister]

this is great. Although I can't experiment much with it I hope people that install it say how it goes.

[SaintDog]

I will install it on my test board tonight and let you know how it goes PPN.

[SaintDog]

Well, I have just installed it and was about to test it yet I noticed the below, is there suppsed to be 5 boxes to place the root directory path in?

[Scott MacVicar]

how many times did you run the query to insert into settings???

[Martz]

PPN you ARE the man

Not going to install this just yet, but a massive thanks for making it! - it is needed by the masses!

[Scott MacVicar]

i've completed the other bits i forgot about, the edit and delete options that are placed around the vBulletin files.

I'm in school at the moment so i'll load the file when i get home and mention it in the first post, will also work on an installer file.

[SaintDog]

Originally posted by PPN
how many times did you run the query to insert into settings???

Only once for each query - this is being run from my windows server though so there could be some problems.

I will try again though with a clean install.

[epic]

something wrong when use this hack

Warning: Unable to create '/67ed09c75ae139a48b26650ba25e91cb.file': Permission denied in /home/httpd/html/vb/admin/functions.php on line 1742

Warning: Unable to move '/tmp/phpqNA6RJ' to '/67ed09c75ae139a48b26650ba25e91cb.file' in /home/httpd/html/vb/admin/functions.php on line 1742

My 1742 line is
move_uploaded_file($attachment, "$path");