Ya, just limit the file size, number of attachment and after a period of time, attachment will be deleted, so that the server won't be full of junks.