source attributes parsed from INI instead of SQL, importable file whitelisting