There are still advantages to saving them in the file system: generally speaking it's faster, simpler, and files are more accessible to filesystem functions than BLOBs are (though if you faff about with PHP5's streams you could get around this). On the other hand, you do have an issue with privacy; you'll need to be able to keep the files of one user separate from those of another.