attachments.php uses url from config