they can attach files when writing a message, not place them somewhere in the editor directly. There are modules to "embed" images which can be placed somewhere then - thats not WYSIWYG though.
and for your second question, look for the store files on disk module.