attachment uploader and management