Little update to my investigations.
A max number of attachment files can’t be set if I saw correctly in source.
But due to testing we found that es_attachment_max_size_in_mb is the actual maximum size for all attachments combined. So it is great that it can be limited that way.
However it is still possible for malicious users to upload thousands of small files as long as they stay under the max MB limit that is set.
It would be great if an option would be added to limit the maximum number of attachments as well and not only the size of all of them combined.
I assume the same issue applies not only to the ticket form but also replys in the web interface.
Br,
Nino