10195501410
/
cloud-computing-course-final
1
0
Rozštěpit 0
Zdrojový kód Úkoly 0 Požadavky na natažení 0 Vydání 0 Wiki Aktivita
Nelze vybrat více než 25 témat Téma musí začínat písmenem nebo číslem, může obsahovat pomlčky („-“) a může být dlouhé až 35 znaků.
3 Revize
1 Větev
4.8 MiB
Strom: 3abb6a6c33
Větve Značky
${ item.name }
Vytvořit větev ${ searchTerm }
z „3abb6a6c33“
${ noResults }
cloud-computing-course-final/server/Application/Api/Controller/AttachmentController.class.php

344 řádky
13 KiB
Surový Normální zobrazení Historie

final project
před 3 roky
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
 
  1. <?php
  2. //附件/图片等等

  3. namespace Api\Controller;
  4. use Think\Controller;
  5. class AttachmentController extends BaseController {
  6. 

  7.     public function index(){
  8.         
  9.         echo 'Attachment';
  10.        
  11.     }
  12. 

  13.     //浏览附件

  14.     public function visitFile(){
  15.       $sign = I("sign");
  16.       $imageView2 = I("imageView2");
  17.       $d = D("UploadFile") ;
  18.       $ret = $d->where(" sign = '%s' ",array($sign))->find();
  19.       if ($ret) {
  20.             $beyond_the_quota = 0 ;
  21.             $days = ceil(( time() -$ret['addtime'])/86400);//自添加图片以来的天数

  22.             $adv_day_times = $ret['visit_times'] / $days  ; //平均每天的访问次数

  23.             $flow_rate = ( $ret['file_size'] * $ret['visit_times'] ) / $days ; //日均流量

  24. 

  25. 

  26.             //如果是apk文件且在微信浏览器中打开

  27.             if ( strpos($_SERVER['HTTP_USER_AGENT'], 'MicroMessenger') !== false  && strpos($ret['real_url'] , '.apk') !== false ) {
  28.                 header("Content-type: text/html; charset=utf-8"); 
  29.                 echo "<head><title>温馨提示</title></head>";
  30.                 echo "<br><h1>微信不支持直接下载，请点击右上角“---”在外部浏览器中打开</h1>";
  31.                 return ;
  32. 

  33.             }
  34. 

  35.           $d->where(" sign = '%s' ",array($sign))->save(array("visit_times" => $ret['visit_times'] + 1  ,"last_visit_time"=>time()));
  36.             //记录用户流量

  37.             D("Attachment")->recordUserFlow($ret['uid'] , $ret['file_size']) ;
  38. 

  39.             //$ret['cache_url'] = '' ; //把这个变量赋值为空，禁用掉cache_url;

  40.             if ($ret['cache_url']) {
  41.                 $url = $ret['cache_url'] ;
  42.             }else{
  43.                 $url = $ret['real_url']  ;
  44.             }
  45. 

  46.         header("location:{$url}");
  47.       }else{
  48.         echo "www.showdoc.cc";
  49.       }
  50.     }
  51. 

  52.     //上传图片

  53.     public function uploadImg(){
  54.         $login_user = $this->checkLogin();
  55.         $item_id = I("item_id/d") ? I("item_id/d") : 0 ;
  56.         $page_id = I("page_id/d") ? I("page_id/d") : 0 ;
  57. 

  58.         
  59.         if ($_FILES['editormd-image-file']['name'] == 'blob') {
  60.             $_FILES['editormd-image-file']['name'] .= '.jpg';
  61.         }
  62.         
  63.         if (!$_FILES['editormd-image-file']) {
  64.            return false;
  65.         }
  66.         
  67.         if (strstr(strip_tags(strtolower($_FILES['editormd-image-file']['name'])), ".php") ) {
  68.             return false;
  69.         }
  70. 

  71.         $url = D("Attachment")->upload($_FILES , 'editormd-image-file' , $login_user['uid'] , $item_id , $page_id ) ;
  72.         if ($url) {
  73.             echo json_encode(array("url"=>$url,"success"=>1));
  74.         }
  75. 

  76.     }
  77. 

  78.     //上传附件

  79.     public function attachmentUpload(){
  80.         $login_user = $this->checkLogin();
  81.         $item_id = I("item_id/d") ? I("item_id/d") : 0 ;
  82.         $page_id = I("page_id/d") ? I("page_id/d") : 0 ;
  83.         $uploadFile = $_FILES['file'] ;
  84.  
  85.         // 如果附件是要上传绑定到某个页面，那么检验项目权限。如果不绑定，只是上传到自己的文件库，则不需要校验项目权限

  86.         if( $page_id > 0 || $item_id > 0){
  87.             if (!$this->checkItemPermn($login_user['uid'] , $item_id)) {
  88.                 $this->sendError(10103);
  89.                 return;
  90.             }
  91.         }
  92.         
  93.         if (!$uploadFile) {
  94.            return false;
  95.         }
  96.         
  97.         if (strstr(strip_tags(strtolower($uploadFile['name'])), ".php") ) {
  98.             return false;
  99.         }
  100. 

  101.         $url = D("Attachment")->upload($_FILES , 'file' , $login_user['uid'] , $item_id , $page_id ) ;
  102.         if ($url) {
  103.             echo json_encode(array("url"=>$url,"success"=>1));
  104.         }
  105. 

  106.     }
  107.     //页面的上传附件列表

  108.     public function pageAttachmentUploadList(){
  109.         $login_user = $this->checkLogin();
  110.         $item_id = I("item_id/d") ? I("item_id/d") : 0 ;
  111.         $page_id = I("page_id/d") ? I("page_id/d") : 0 ;
  112.         if (!$page_id) {
  113.             $this->sendError(10103,"请至少先保存一次页面内容");
  114.             return;
  115.         }
  116.         $return = array() ;
  117.         $files = D("UploadFile")->join(" file_page on file_page.file_id = upload_file.file_id")->field("upload_file.* , file_page.item_id as item_id ,file_page.page_id as page_id  ")->where("file_page.page_id = '$page_id' ")->order("file_page.addtime desc")->select();
  118.         if ($files) {
  119.             $item_id = $files[0]['item_id'] ;
  120.             if (!$this->checkItemVisit($login_user['uid'] , $item_id)) {
  121.                 $this->sendError(10103);
  122.                 return;
  123.             }
  124.             foreach ($files as $key => $value) {
  125.                 $url = '';
  126.                 if($value['sign']){
  127.                    $url =  get_domain().U("api/attachment/visitFile",array("sign" => $value['sign'])) ;
  128.                 }else{
  129.                   $url =  $value['real_url'] ;
  130.                 }
  131.                 $return[] = array(
  132.                     "file_id"=>$value['file_id'],
  133.                     "display_name"=>$value['display_name'],
  134.                     "url"=>$url,
  135.                     "addtime"=> date("Y-m-d H:i:s" , $value['addtime'] ),
  136.                     );
  137.             }
  138. 

  139.         }
  140.         $this->sendResult($return);
  141. 

  142.     }
  143. 

  144.     //删除页面中已上传文件

  145.     public function deletePageUploadFile(){
  146.         $login_user = $this->checkLogin();
  147.         $file_id = I("file_id/d") ? I("file_id/d") : 0 ;
  148.         $page_id = I("page_id/d") ? I("page_id/d") : 0 ;
  149.         $count = D("FilePage")->where(" file_id = '$file_id' and page_id > 0   ")->count() ;
  150.         if($count <= 1 ){
  151.             $this->deleteMyAttachment();
  152.         }else{
  153.             $page = M("Page")->where(" page_id = '$page_id' ")->find();
  154.             if (!$this->checkItemPermn($login_user['uid'] , $page['item_id'])) {
  155.                 $this->sendError(10103);
  156.                 return;
  157.             }
  158.             $res = D("FilePage")->where(" file_id = '$file_id' and page_id = '$page_id'   ")->delete() ;
  159.             if($res){
  160.                 $this->sendResult(array());
  161.             }else{
  162.                 $this->sendError(10101,"删除失败");
  163.             }
  164. 

  165.         }
  166.         
  167.     }
  168. 

  169.     //获取全站的附件列表。给管理员查看附件用

  170.     public function getAllList(){
  171.         $login_user = $this->checkLogin();
  172.         $this->checkAdmin(); //重要，校验管理员身份

  173.         $page = I("page/d");
  174.         $count = I("count/d");
  175.         $attachment_type = I("attachment_type/d");
  176.         $display_name = I("display_name");
  177.         $username = I("username");
  178.         $return = array() ;
  179.         $where = ' 1 = 1 ';
  180.         if($attachment_type == 1 ){
  181.             $where .=" and file_type like '%image%' " ;
  182.         }
  183.         if($attachment_type == 2 ){
  184.             $where .=" and file_type not like '%image%' " ;
  185.         }
  186.         if($display_name){
  187.             $display_name =  \SQLite3::escapeString($display_name) ;
  188.             $where .=" and display_name  like '%{$display_name}%' " ;
  189.         }
  190.         if($username){
  191.             $username =  \SQLite3::escapeString($username) ;
  192.             $uid = D("User")->where(" username = '{$username}' ")->getField('uid') ;
  193.             $uid = $uid ? $uid  : -99 ;
  194.             $where .=" and uid  = '{$uid}' " ;
  195.         }
  196.         $files = D("UploadFile")->where($where)->order("addtime desc")->page($page ,$count)->select();
  197.         if ($files) {
  198.             foreach ($files as $key => $value) {
  199.                 $username = '';
  200.                 if($value['uid']){
  201.                     $username = D("User")->where(" uid = {$value['uid']} ")->getField('username') ;
  202.                 }
  203.                 $url = '';
  204.                 if($value['sign']){
  205.                    $url =  get_domain().U("api/attachment/visitFile",array("sign" => $value['sign'])) ;
  206.                 }else{
  207.                   $url =  $value['real_url'] ;
  208.                 }
  209.                 $return['list'][] = array(
  210.                     "file_id"=>$value['file_id'],
  211.                     "username"=>$username,
  212.                     "uid"=>$value['uid'],
  213.                     "file_type"=>$value['file_type'],
  214.                     "visit_times"=>$value['visit_times'],
  215.                     "file_size"=>$value['file_size'],
  216.                     "item_id"=>$value['item_id'],
  217.                     "page_id"=>$value['page_id'],
  218.                     "file_size_m"=>round( $value['file_size']/(1024*1024),3),
  219.                     "display_name"=>$value['display_name']?$value['display_name']:'',
  220.                     "url"=>$url ,
  221.                     "addtime"=> date("Y-m-d H:i:s" , $value['addtime'] ),
  222.                     "last_visit_time"=> date("Y-m-d H:i:s" , $value['last_visit_time'] ),
  223.                     );
  224.             }
  225. 

  226.         }
  227.         $return['total'] = D("UploadFile")->where($where)->count();
  228.         $used = D("UploadFile")->where($where)->getField('sum(file_size)');
  229.         $return['used'] = $used ;
  230.         $return['used_m'] = round( $used/(1024*1024),3) ;
  231.         $this->sendResult($return);
  232.     }
  233. 

  234.     //删除附件

  235.     public function deleteAttachment(){
  236.         $login_user = $this->checkLogin();
  237.         $this->checkAdmin(); //重要，校验管理员身份

  238.         $file_id = I("file_id/d") ? I("file_id/d") : 0 ;
  239. 

  240.         $file = D("UploadFile")->where("file_id = '$file_id' ")->find();
  241. 

  242.         $ret = D("Attachment")->deleteFile($file_id);
  243.         if ($ret) {
  244.             $this->sendResult(array());
  245.         }else{
  246.             $this->sendError(10101,"删除失败");
  247.         }
  248.     }
  249. 

  250.     //获取我的附件列表

  251.     public function getMyList(){
  252.         $login_user = $this->checkLogin();
  253.         $page = I("page/d");
  254.         $count = I("count/d");
  255.         $attachment_type = I("attachment_type/d");
  256.         $display_name = I("display_name");
  257.         $username = I("username");
  258.         $return = array() ;
  259.         $where = " uid  = {$login_user['uid']} ";
  260.         if($attachment_type == 1 ){
  261.             $where .=" and file_type like '%image%' " ;
  262.         }
  263.         if($attachment_type == 2 ){
  264.             $where .=" and file_type not like '%image%' " ;
  265.         }
  266.         if($display_name){
  267.             $display_name =  \SQLite3::escapeString($display_name) ;
  268.             $where .=" and display_name  like '%{$display_name}%' " ;
  269.         }
  270.         $files = D("UploadFile")->where($where)->order("addtime desc")->page($page ,$count)->select();
  271.         if ($files) {
  272.             foreach ($files as $key => $value) {
  273.                 $username = '';
  274.                 $return['list'][] = array(
  275.                     "file_id"=>$value['file_id'],
  276.                     "uid"=>$value['uid'],
  277.                     "file_type"=>$value['file_type'],
  278.                     "visit_times"=>$value['visit_times'],
  279.                     "file_size"=>$value['file_size'],
  280.                     "item_id"=>$value['item_id'],
  281.                     "page_id"=>$value['page_id'],
  282.                     "file_size_m"=>round( $value['file_size']/(1024*1024),3),
  283.                     "display_name"=>$value['display_name']?$value['display_name']:'',
  284.                     "url"=>get_domain().U("api/attachment/visitFile",array("sign" => $value['sign'])),
  285.                     "addtime"=> date("Y-m-d H:i:s" , $value['addtime'] ),
  286.                     "last_visit_time"=> date("Y-m-d H:i:s" , $value['last_visit_time'] ),
  287.                     );
  288.             }
  289. 

  290.         }
  291.         $return['total'] = D("UploadFile")->where($where)->count();
  292.         $used = D("UploadFile")->where($where)->getField('sum(file_size)');
  293.         $return['used'] = $used ;
  294.         $return['used_m'] = round( $used/(1024*1024),3) ;
  295.         $used_flow =  D("Attachment")->getUserFlow($login_user['uid']) ; ; //该用户的本月使用流量

  296.         $return['used_flow_m'] = round( $used_flow/(1024*1024),3) ;
  297. 

  298.         $this->sendResult($return);
  299.     }
  300. 

  301.     //删除附件

  302.     public function deleteMyAttachment(){
  303.         $login_user = $this->checkLogin();
  304.         $file_id = I("file_id/d") ? I("file_id/d") : 0 ;
  305. 

  306.         $file = D("UploadFile")->where("file_id = '$file_id' and uid ='$login_user[uid]' ")->find();
  307. 

  308.         if($file){
  309.             $ret = D("Page")->deleteFile($file_id);
  310.             if ($ret) {
  311.                 $this->sendResult(array());
  312.                 return ;
  313.             }
  314.         }
  315.         $this->sendError(10101,"删除失败");
  316.     }
  317. 

  318.     //将已上传文件绑定到页面中

  319.     public function bindingPage(){
  320.         $login_user = $this->checkLogin();
  321.         $file_id = I("file_id/d") ? I("file_id/d") : 0 ;
  322.         $page_id = I("page_id/d");
  323.         $file = D("UploadFile")->where("file_id = '$file_id' and uid ='$login_user[uid]' ")->find();
  324.         $page = M("Page")->where(" page_id = '$page_id' ")->find();
  325.         if (!$this->checkItemPermn($login_user['uid'] , $page['item_id'])) {
  326.             $this->sendError(10103);
  327.             return;
  328.         }
  329.         $insert = array(
  330.             "file_id" => $file_id,
  331.             "item_id" => $page['item_id'] ,
  332.             "page_id" => $page_id,
  333.             "addtime" => time(),
  334.             );
  335.         $ret = D("FilePage")->add($insert);
  336.         if( $ret){
  337.             $this->sendResult(array());
  338.         }else{
  339.             $this->sendError(10101);
  340.         }
  341. 

  342.     }
  343. 

  344. }