Depending on how the system is architected, storing files on disk may not be appropriate. In large systems, SQL server usually lives on its own box or a cluster of boxes, and application that uses this SQL server has no direct access to the disk(s).

Also, if you store file names only, you can't easily delete files via SQL statements. You'd either need a separate application for that or you'd have to write some sort of stored procedure. This is not necessarily bad, it's just something that you'd have to keep in mind.

--perlplexer