vr-shopxo-source/extend/base/Uploader.php

<?php
// +----------------------------------------------------------------------
// | ShopXO 国内领先企业级B2C免费开源电商系统
// +----------------------------------------------------------------------
// | Copyright (c) 2011~2099 http://shopxo.net All rights reserved.
// +----------------------------------------------------------------------
// | Licensed ( https://opensource.org/licenses/mit-license.php )
// +----------------------------------------------------------------------
// | Author: Devil
// +----------------------------------------------------------------------
namespace base;

/**
 * Created by JetBrains PhpStorm.
 * User: taoqili
 * Date: 12-7-18
 * Time: 上午11: 32
 * UEditor编辑器通用上传类
 */
class Uploader
{
    private $fileField; //文件域名
    private $file; //文件上传对象
    private $type; //类型
    private $base64; //文件上传对象
    private $config; //配置信息
    private $oriName; //原始文件名
    private $fileName; //新文件名
    private $fullName; //完整文件名,即从当前配置目录开始的URL
    private $filePath; //完整文件名,即从当前配置目录开始的URL
    private $fileSize; //文件大小
    private $fileType; //文件类型
    private $stateInfo; //上传状态信息,

    /**
     * 构造函数
     * @param string $fileField 表单名称
     * @param array $config 配置项
     * @param bool $base64 是否解析base64编码，可省略。若开启，则$fileField代表的是base64编码的字符串表单名
     */
    public function __construct($fileField, $config, $type = 'file')
    {
        $this->fileField = $fileField;
        $this->config = $config;
        $this->type = $type;
        switch($this->type)
        {
            // 抓取远程文件
            case 'remote' :
                $this->saveRemote();
                break;

            // base64文件
            case 'base64' :
            case 'scrawl' :
                $this->uploadBase64();
                break;

            // 图片
            case 'image' :
                $this->uploadImage();
                break;

            // 文件、视频
            case 'file' :
            case 'video' :
                $this->uploadFile();
                break;

            // 默认
            default :
                $this->stateInfo = $this->getStateErrorInfo('error_upload_type');
        }
    }

    /**
     * 文件上传
     * @author   Devil
     * @blog    http://gong.gg/
     * @version 1.0.0
     * @date    2019-02-26
     * @desc    description
     */
    private function uploadFile()
    {
        if(empty($_FILES[$this->fileField]))
        {
            $this->stateInfo = $this->getStateErrorInfo('error_size_exceed');
            return;
        }
        
        $this->file = $_FILES[$this->fileField];
        if (!$this->file) {
            $this->stateInfo = $this->getStateErrorInfo('error_file_not_found');
            return;
        }
        if ($this->file['error']) {
            $this->stateInfo = $this->getFileErrorInfo($this->file['error']);
            return;
        } else if (!file_exists($this->file['tmp_name'])) {
            $this->stateInfo = $this->getStateErrorInfo('error_tmp_file_not_found');
            return;
        } else if (!is_uploaded_file($this->file['tmp_name'])) {
            $this->stateInfo = $this->getStateErrorInfo('error_tmp_file');
            return;
        }

        $this->oriName = $this->file['name'];
        $this->fileSize = $this->file['size'];
        $this->fileType = $this->getFileExt();
        $this->fullName = $this->getFullName();
        $this->filePath = $this->getFilePath();
        $this->fileName = $this->getFileName();
        $dirname = dirname($this->filePath);

        //检查文件大小是否超出限制
        if (!$this->checkSize()) {
            $this->stateInfo = $this->getStateErrorInfo('error_size_exceed');
            return;
        }

        //检查是否不允许的文件格式
        if (!$this->checkType()) {
            $this->stateInfo = $this->getStateErrorInfo('error_type_not_allowed');
            return;
        }

        //创建目录失败
        if (!is_dir($dirname) && !@mkdir($dirname, 0777, true)) {
            $this->stateInfo = $this->getStateErrorInfo('error_create_dir');
            return;
        } else if (!is_writeable($dirname)) {
            $this->stateInfo = $this->getStateErrorInfo('error_dir_not_writeable');
            return;
        }

        // 安全验证
        $ret = \base\FileUtil::FileContentSecurityCheck($this->file['tmp_name']);
        if($ret['code'] != 0)
        {
            $this->stateInfo = $ret['msg'];
            return;
        }

        //移动文件
        if (!(move_uploaded_file($this->file['tmp_name'], $this->filePath) && file_exists($this->filePath))) { //移动失败
            $this->stateInfo = $this->getStateErrorInfo('error_file_move');
        } else { //移动成功
            $this->stateInfo = 'SUCCESS';
        }
    }

    /**
     * 图片上传
     * @author   Devil
     * @blog    http://gong.gg/
     * @version 1.0.0
     * @date    2019-02-26
     * @desc    description
     */
    private function uploadImage()
    {
        $this->file = empty($_FILES[$this->fileField]) ? '' : $_FILES[$this->fileField];
        if (!$this->file) {
            $this->stateInfo = $this->getStateErrorInfo('error_file_not_found');
            return;
        }
        if ($this->file['error']) {
            $this->stateInfo = $this->getStateErrorInfo($this->file['error']);
            return;
        } else if (!file_exists($this->file['tmp_name'])) {
            $this->stateInfo = $this->getStateErrorInfo('error_tmp_file_not_found');
            return;
        } else if (!is_uploaded_file($this->file['tmp_name'])) {
            $this->stateInfo = $this->getStateErrorInfo('error_tmp_file');
            return;
        }

        // 防止原名称没有带后缀
        $info = getimagesize($this->file['tmp_name']);
        if(stripos($this->file['name'], '.') === false)
        {
            $this->file['name'] .= str_replace('/', '.', $info['mime']);
        }

        $this->oriName = $this->file['name'];
        $this->fileSize = $this->file['size'];
        $this->fileType = $this->getFileExt();
        $this->fullName = $this->getFullName();
        $this->filePath = $this->getFilePath();
        $this->fileName = $this->getFileName();
        $dirname = dirname($this->filePath);

        //检查文件大小是否超出限制
        if (!$this->checkSize()) {
            $this->stateInfo = $this->getStateErrorInfo('error_size_exceed');
            return;
        }

        //检查是否不允许的文件格式
        if (!$this->checkType()) {
            $this->stateInfo = $this->getStateErrorInfo('error_type_not_allowed');
            return;
        }

        //创建目录失败
        if (!is_dir($dirname) && !@mkdir($dirname, 0777, true)) {
            $this->stateInfo = $this->getStateErrorInfo('error_create_dir');
            return;
        } else if (!is_writeable($dirname)) {
            $this->stateInfo = $this->getStateErrorInfo('error_dir_not_writeable');
            return;
        }

        // 是否php文件类型
        if($info['mime'] == 'text/x-php')
        {
            $this->stateInfo = $this->getStateErrorInfo('invalid_file');
            return;
        }

        // 安全验证
        $ret = \base\FileUtil::FileContentSecurityCheck($this->file['tmp_name']);
        if($ret['code'] != 0)
        {
            $this->stateInfo = $ret['msg'];
            return;
        }

        // 是否需要直接存储文件
        if(!move_uploaded_file($this->file['tmp_name'], $this->filePath))
        {
            $this->stateInfo = $this->getStateErrorInfo('error_file_move');
        }

        // 图片是否存储成功
        if(!file_exists($this->filePath))
        {
            $this->stateInfo = $this->getStateErrorInfo('error_image_save');
        } else {
            $this->stateInfo = 'SUCCESS';
        }
    }

    /**