When I edit my biography, and I insert content - where is that stored?

Let's say I edit my user profile, and I want to embellish it with images and video:

That image and video is then stored * somewhere *, and if I remove it from my biography, it's presumably still sat in that * somewhere *.

I'm unclear on how central file stores are organised, and it is already difficult to have a piece of inserted media like this and find what content it's embedded in, but also what's typically the opposite and how is this restricted or limited?

If this isn't already documented somewhere, it needs to be.

On our platform, I've decided to restrict this rich text editor for the sake of moderation, at present someone could insert an image, file or video, capture the download link, and remove the reference to it, but then distribute that link. That's just one example. It's a trade-off that members now cannot insert such content and it's now simply plain text, but that also reduces opportunity for abuse.

However, I'd like to be able to do a 'clean up' of anything inserted in this manner, and make sure that user accounts that have uploaded illicit and inappropriate content to their profile is cleaned up. So for that, I need to know where to look if it's different to groups, and to ensure those stores are included in any appropriate scans.

Does this also differ if you're on AWS versus Azure, etc?

  • All of these files are stored in the user files folder:

    communityserver.components.userfiles or communityserver-components-userfiles

    For example, if a file is uploaded under Biography, it is stored like this:

    /communityserver-components-userfiles/00-00-00-21-07-attachments/screenshot-2025_2D00_12_2D00_18-145629.png

    Here, communityserver-components-userfiles is the main folder under CFS, and
    00-00-00-21-07-attachments is a subfolder that is created individually for that upload.

    When I tested this URL in an incognito window, it appeared to be restricted for anonymous users, but the same link is accessible to other logged-in users.

    I’m not sure if this behavior differs between AWS and Azure, but if you check under CFS, you should find a folder named either communityserver.components.userfiles or communityserver-components-userfiles.

    I think this would be a good starting point before Verint responds to your questions.