If you post a new message and enter a title, message, attachment message, and the actual attachment and click "Add file" you get redirected to the preview screen. Fine so far, but in the posted attachments section, the real filename and filepath info is displayed. i.e. here's the link that is displayed: http://" target="_blank * /phpBB2/files/2_de36f09498b85c9ee70a0ce944a3c271.gif But once you post the message and attachment, if you go to edit, then the protected filepath is displayed: http://" target="_blank * /phpBB2/download.php?id=2