Attachment Storage - Database or Files Directory

[markh]

Hi everyone,

Just a quick question, what is the best method of storing the attachments to tickets?

Long story is I was having problems with corrupt attachments using the default database method, however I have fixed this and it was due to the maximum chunk size being larger then the maximum packet size that was set in MySQL's configuration. However, it made me think about which is best.

I came to the conclusion that eventually storing it by database may have introduce performance problems down the track as the database gets larger and larger. However, I'm certainly no database guru and after all, it is the default option. So, in your opinion what is the optimal option?

Thanks,
Mark

[Jamie Edwards]

Hi Mark,

You are correct - storing the files in the database will add an extra load on the database server in terms of size and demand (when users request files, etc.)

The file system is a much more reliable way of storing files, particularly if you have constraints on your database server.

[supportskins]

Saving attachments in the "files" directory should be the way to go.

[markh]

Thanks!

What are the potential security implications of storing attachments via the files directory?

For example, some attachments are PDFs which outlines details such as our user's login details. Would be disastrous if someone unauthorised could view them all.

[craigbrass]

Yup. File Storage is better. Database Storage puts big strain on the Database.

I am not totally sure but I think it is well protected to make sure only users with permissions can access.

[supportskins]

Kayako encrypts the file name before storing them into the files directory. For example a file sample.pdf will be saved as wdiho213qewpqwejkdw without any extensions which can only be read from the Kayako. I hope this makes sense.