File: /www/wwwroot/cms.smpolia.com/application/common/library/Upload.php
<?php
// +----------------------------------------------------------------------
// | Yzncms [ 御宅男工作室 ]
// +----------------------------------------------------------------------
// | Copyright (c) 2018 http://yzncms.com All rights reserved.
// +----------------------------------------------------------------------
// | Licensed ( http://www.apache.org/licenses/LICENSE-2.0 )
// +----------------------------------------------------------------------
// | Author: fastadmin: https://www.fastadmin.net/
// +----------------------------------------------------------------------
// +----------------------------------------------------------------------
// | 上传基础类
// +----------------------------------------------------------------------
namespace app\common\library;
use app\attachment\model\Attachment;
use app\common\exception\UploadException;
use think\facade\Hook;
use think\File;
class Upload
{
protected $file = null;
protected $fileInfo = null;
protected $merging = false;
protected $chunkDir = null;
public function __construct($file = null)
{
$this->chunkDir = ROOT_PATH . 'runtime' . DS . 'chunks';
if ($file) {
$this->setFile($file);
}
}
public function setFile($file)
{
if (empty($file)) {
throw new UploadException('未上传文件或超出服务器上传限制');
}
$fileInfo = $file->getInfo();
$suffix = strtolower(pathinfo($fileInfo['name'], PATHINFO_EXTENSION));
$suffix = $suffix && preg_match("/^[a-zA-Z0-9]+$/", $suffix) ? $suffix : 'file';
$fileInfo['suffix'] = $suffix;
//$fileInfo['imagewidth'] = 0;
//$fileInfo['imageheight'] = 0;
$this->file = $file;
$this->fileInfo = $fileInfo;
$this->checkExecutable();
}
protected function checkExecutable()
{
//禁止上传PHP和HTML文件
if (in_array($this->fileInfo['type'], ['text/x-php', 'text/html']) || in_array($this->fileInfo['suffix'], ['php', 'asp', 'exe', 'cmd', 'sh', 'bat', 'html', 'htm', 'phtml', 'phar']) || preg_match("/^php(.*)/i", $this->fileInfo['suffix'])) {
throw new UploadException('上传文件格式受限制');
}
return true;
}
protected function checkImage($force = false)
{
//验证是否为图片文件
if (in_array($this->fileInfo['type'], ['image/gif', 'image/jpg', 'image/jpeg', 'image/bmp', 'image/png', 'image/webp']) || in_array($this->fileInfo['suffix'], ['gif', 'jpg', 'jpeg', 'bmp', 'png', 'webp', 'wbmp'])) {
$imgInfo = getimagesize($this->fileInfo['tmp_name']);
if (!$imgInfo || !isset($imgInfo[0]) || !isset($imgInfo[1])) {
throw new UploadException('上传文件不是有效的图片文件');
}
//$this->fileInfo['imagewidth'] = isset($imgInfo[0]) ? $imgInfo[0] : 0;
//$this->fileInfo['imageheight'] = isset($imgInfo[1]) ? $imgInfo[1] : 0;
return true;
} else {
return !$force;
}
}
protected function checkSize($dir)
{
// 附件大小限制
$size_limit = $dir == 'images' ? config('upload_image_size') : config('upload_file_size');
$size_limit = $size_limit * 1024;
// 判断附件大小是否超过限制
if ($size_limit > 0 && ($this->fileInfo['size'] > $size_limit)) {
throw new UploadException('附件过大');
}
}
protected function checkMimetype($dir)
{
$typeArr = explode('/', $this->fileInfo['type']);
// 附件类型限制
$ext_limit = $dir == 'images' ? config('upload_image_ext') : config('upload_file_ext');
$ext_limit = $ext_limit != '' ? parse_attr($ext_limit) : [];
// 判断附件格式是否符合
$file_ext = $this->fileInfo['suffix'];
$error_msg = '';
if ($ext_limit == '') {
$error_msg = '获取文件后缀限制信息失败！';
}
if (preg_grep("/php/i", $ext_limit)) {
$error_msg = '禁止上传非法文件！';
}
if (!preg_grep("/$file_ext/i", $ext_limit) || !in_array($file_ext, $ext_limit)) {
$error_msg = '附件类型不正确！';
}
if ($error_msg != '') {
throw new UploadException($error_msg);
}
$typeArr = explode('/', $this->fileInfo['type']);
//Mimetype值不正确
if (stripos($this->fileInfo['type'], '/') === false) {
throw new UploadException('上传文件格式受限制');
}
//验证文件后缀
if (in_array($this->fileInfo['suffix'], $ext_limit) || in_array('.' . $this->fileInfo['suffix'], $ext_limit)
|| in_array($typeArr[0] . "/*", $ext_limit) || in_array($this->fileInfo['type'], $ext_limit)) {
return true;
}
throw new UploadException('上传文件格式受限制');
}
/**
* 保存附件
* @param string $dir 附件存放的目录
* @param string $from 来源
* @return string|\think\response\Json
*/
public function upload($dir = '', $from = '', $savekey = null)
{
if (empty($this->file)) {
throw new UploadException('未上传文件或超出服务器上传限制');
}
$this->checkSize($dir);
$this->checkMimetype($dir);
$this->checkExecutable();
$this->checkImage();
// 判断附件是否已存在
if ($file_exists = Attachment::get(['md5' => $this->file->hash('md5')])) {
return json([
'code' => 1,
'info' => $file_exists['name'] . '上传成功',
'id' => $file_exists['id'],
'path' => $file_exists['path'],
"state" => "SUCCESS", // 上传状态，上传成功时必须返回"SUCCESS" 兼容百度
"url" => $file_exists['path'], // 返回的地址 兼容百度
"title" => $file_exists['name'], // 附件名 兼容百度
"success" => 1, //兼容editormd
"message" => $file_exists['name'], // 附件名 兼容editormd
]);
}
// 附件上传钩子，用于第三方文件上传扩展
if (config('upload_driver') != 'local') {
$hook_result = Hook::listen('upload_after', ['dir' => $dir, 'file' => $this->file, 'from' => $from], true);
if (false !== $hook_result) {
return $hook_result;
}
}
$savekey = $savekey ? $savekey : $this->getSavekey($dir);
//$savekey = '/' . ltrim($savekey, '/');
$savekey = ltrim($savekey, '/');
$uploadDir = substr($savekey, 0, strripos($savekey, '/') + 1);
$fileName = substr($savekey, strripos($savekey, '/') + 1);
$destDir = ROOT_PATH . 'public/' . str_replace('/', DS, $uploadDir);
$sha1 = $this->file->hash();
$md5 = $this->file->md5();
//如果是合并文件
if ($this->merging) {
$destFile = $destDir . $fileName;
$sourceFile = $this->file->getRealPath() ?: $this->file->getPathname();
$fileinfo = $this->file->getInfo();
$this->file = null;
if (!is_dir($destDir)) {
@mkdir($destDir, 0755, true);
}
rename($sourceFile, $destFile);
$info = new File($destFile);
$info->setSaveName($fileName)->setUploadInfo($fileinfo);
} else {
// 移动到框架应用根目录指定目录下
$info = $this->file->move($destDir, $fileName);
}
if ($info) {
// 水印参数
$thumb = request()->post('thumb/d', 0);
// 水印功能
if ($thumb) {
if ($dir == 'images' && config('upload_thumb_water') == 1 && config('upload_thumb_water_pic') != "") {
model('Attachment')->create_water($info->getRealPath(), config('upload_thumb_water_pic'));
}
}
// 获取附件信息
$file_info = [
'aid' => (int) session('admin.id'),
'uid' => (int) cookie('uid'),
'name' => mb_substr(htmlspecialchars(strip_tags($this->fileInfo['name'])), 0, 100),
'mime' => $this->fileInfo['type'],
'path' => config('public_url') . $uploadDir . $info->getSaveName(),
'ext' => $this->fileInfo['suffix'],
'size' => $this->fileInfo['size'],
'md5' => $md5,
'sha1' => $sha1,
];
if ($file_add = Attachment::create($file_info)) {
return json([
'code' => 1,
'info' => $file_info['name'] . '上传成功',
'id' => $file_add['id'],
'path' => $file_info['path'],
"state" => "SUCCESS", // 上传状态，上传成功时必须返回"SUCCESS" 兼容百度
"url" => $file_info['path'], // 返回的地址 兼容百度
"title" => $file_info['name'], // 附件名 兼容百度
"success" => 1, //兼容editormd
"message" => $file_info['name'], // 附件名 兼容editormd
]);
} else {
throw new UploadException('上传成功,写入数据库失败');
}
} else {
throw new UploadException('上传失败');
}
}
/**
* 合并分片文件
* @param string $chunkid
* @param int $chunkcount
* @param string $filename
* @return attachment|\think\Model
* @throws UploadException
*/
public function merge($chunkid, $chunkcount, $filename, $dir, $from)
{
if (!preg_match('/^[a-z0-9\_]+$/', $chunkid)) {
throw new UploadException('未知参数');
}
$filePath = $this->chunkDir . DS . $chunkid;
$completed = true;
//检查所有分片是否都存在
for ($i = 0; $i < $chunkcount; $i++) {
if (!file_exists("{$filePath}-{$i}.part")) {
$completed = false;
break;
}
}
if (!$completed) {
$this->clean($chunkid);
throw new UploadException('分片文件错误');
}
//如果所有文件分片都上传完毕，开始合并
$uploadPath = $filePath;
if (!$destFile = @fopen($uploadPath, "wb")) {
$this->clean($chunkid);
throw new UploadException('分片合并错误');
}
if (flock($destFile, LOCK_EX)) {
// 进行排他型锁定
for ($i = 0; $i < $chunkcount; $i++) {
$partFile = "{$filePath}-{$i}.part";
if (!$handle = @fopen($partFile, "rb")) {
break;
}
while ($buff = fread($handle, filesize($partFile))) {
fwrite($destFile, $buff);
}
@fclose($handle);
@unlink($partFile); //删除分片
}
flock($destFile, LOCK_UN);
}
@fclose($destFile);
$attachment = null;
try {
$file = new File($uploadPath);
$info = [
'name' => $filename,
'type' => $file->getMime(),
'tmp_name' => $uploadPath,
'error' => 0,
'size' => $file->getSize(),
];
$file->setSaveName($filename)->setUploadInfo($info);
$file->isTest(true);
//重新设置文件
$this->setFile($file);
unset($file);
$this->merging = true;
//允许大文件
//$this->config['maxsize'] = "1024G";
$attachment = $this->upload($dir, $from);
} catch (\Exception $e) {
@unlink($destFile);
throw new UploadException($e->getMessage());
}
return $attachment;
}
/**
* 清理分片文件
* @param $chunkid
*/
public function clean($chunkid)
{
if (!preg_match('/^[a-z0-9\_]+$/', $chunkid)) {
throw new UploadException('未知参数');
}
$iterator = new \GlobIterator($this->chunkDir . DS . $chunkid . '-*', FilesystemIterator::KEY_AS_FILENAME);
$array = iterator_to_array($iterator);
foreach ($array as $index => &$item) {
$sourceFile = $item->getRealPath() ?: $item->getPathname();
$item = null;
@unlink($sourceFile);
}
}
/**
* 分片上传
*/
public function chunk($chunkid, $chunkindex, $chunkcount, $chunkfilesize = null, $chunkfilename = null, $direct = false)
{
/*if ($this->fileInfo['type'] != 'application/octet-stream') {
throw new UploadException(__('Uploaded file format is limited'));
}*/
if (!preg_match('/^[a-z0-9\_]+$/', $chunkid)) {
throw new UploadException('未知参数');
}
$fileName = $chunkid . "-" . $chunkindex . '.part';
$destFile = $this->chunkDir . DS . $fileName;
if (!is_dir($this->chunkDir)) {
@mkdir($this->chunkDir, 0755, true);
}
if (!move_uploaded_file($this->file->getPathname(), $destFile)) {
throw new UploadException('分片写入失败');
}
$file = new File($destFile);
$info = [
'name' => $fileName,
'type' => $file->getMime(),
'tmp_name' => $destFile,
'error' => 0,
'size' => $file->getSize(),
];
$file->setSaveName($fileName)->setUploadInfo($info);
$this->setFile($file);
return $file;
}
protected function getSavekey($dir, $savekey = null, $filename = null, $md5 = null)
{
if ($filename) {
$suffix = strtolower(pathinfo($filename, PATHINFO_EXTENSION));
$suffix = $suffix && preg_match("/^[a-zA-Z0-9]+$/", $suffix) ? $suffix : 'file';
} else {
$suffix = $this->fileInfo['suffix'];
}
$filename = $filename ? $filename : ($suffix ? substr($this->fileInfo['name'], 0, strripos($this->fileInfo['name'], '.')) : $this->fileInfo['name']);
$md5 = $md5 ? $md5 : md5_file($this->fileInfo['tmp_name']);
$replaceArr = [
'{dir}' => $dir,
'{year}' => date("Y"),
'{mon}' => date("m"),
'{day}' => date("d"),
'{hour}' => date("H"),
'{min}' => date("i"),
'{sec}' => date("s"),
'{random}' => \util\Random::alnum(16),
'{random32}' => \util\Random::alnum(32),
'{filename}' => substr($filename, 0, 100),
'{suffix}' => $suffix,
'{.suffix}' => $suffix ? '.' . $suffix : '',
'{filemd5}' => $md5,
];
$savekey = $savekey ? $savekey : config('savekey');
$savekey = str_replace(array_keys($replaceArr), array_values($replaceArr), $savekey);
return $savekey;
}
}