game-sdk/admin/user/controller/UeditorController.php

<?php
// +----------------------------------------------------------------------
// | ThinkCMF [ WE CAN DO IT MORE SIMPLE ]
// +----------------------------------------------------------------------
// | Copyright (c) 2013-2017 http://www.thinkcmf.com All rights reserved.
// +----------------------------------------------------------------------
// | Licensed ( http://www.apache.org/licenses/LICENSE-2.0 )
// +----------------------------------------------------------------------
// | Author: kane <chengjin005@163.com>
// +----------------------------------------------------------------------
namespace admin\user\controller;

use cmf\controller\HomeBaseController;
use cmf\lib\Upload;

/**
 * 百度编辑器文件上传处理控制器
 * Class Ueditor
 *
 * @package app\asset\controller
 */
class UeditorController extends HomeBaseController {
    private $stateMap
        = [ //上传状态映射表，国际化用户需考虑此处数据的国际化
            "SUCCESS", //上传成功标记，在UEditor中内不可改变，否则flash判断会出错
            "文件大小超出 upload_max_filesize 限制",
            "文件大小超出 MAX_FILE_SIZE 限制",
            "文件未被完整上传",
            "没有文件被上传",
            "上传文件为空",
            "ERROR_TMP_FILE"           => "临时文件错误",
            "ERROR_TMP_FILE_NOT_FOUND" => "找不到临时文件",
            "ERROR_SIZE_EXCEED"        => "文件大小超出网站限制",
            "ERROR_TYPE_NOT_ALLOWED"   => "文件类型不允许",
            "ERROR_CREATE_DIR"         => "目录创建失败",
            "ERROR_DIR_NOT_WRITEABLE"  => "目录没有写权限",
            "ERROR_FILE_MOVE"          => "文件保存时出错",
            "ERROR_FILE_NOT_FOUND"     => "找不到上传文件",
            "ERROR_WRITE_CONTENT"      => "写入文件内容错误",
            "ERROR_UNKNOWN"            => "未知错误",
            "ERROR_DEAD_LINK"          => "链接不可用",
            "ERROR_HTTP_LINK"          => "链接不是http链接",
            "ERROR_HTTP_CONTENTTYPE"   => "链接contentType不正确"
        ];

    /**
     * 初始化
     */
    function _initialize() {
        $adminId = cmf_get_current_admin_id();
        $userId = cmf_get_current_user_id();
        if (empty($adminId) && empty($userId)) {
            exit("非法上传！");
        }
    }

    /**
     * 处理上传处理
     */
    function upload() {
        error_reporting(E_ERROR);
        header("Content-Type: text/html; charset=utf-8");
        $action = $this->request->param('action');
        switch ($action) {
            case 'config':
                $result = $this->ueditorConfig();
                break;
            /* 上传图片 */
            case 'uploadimage':
                $result = $this->ueditorUpload("image");
                break;
            /* 上传涂鸦 */
            case 'uploadscrawl':
                $result = $this->ueditorUpload("image");
                break;
            /* 上传视频 */
            case 'uploadvideo':
                $result = $this->ueditorUpload("video");
                break;
            /* 上传文件 */
            case 'uploadfile':
                $result = $this->ueditorUpload("file");
                break;
            /* 列出图片 */
            case 'listimage':
                $result = "";
                break;
            /* 列出文件 */
            case 'listfile':
                $result = "";
                break;
            /* 抓取远程文件 */
            case 'catchimage':
                $result = $this->_get_remote_image();
                break;
            default:
                $result = json_encode(['state' => '请求地址出错']);
                break;
        }
        /* 输出结果 */
        if (isset($_GET["callback"]) && false) {//TODO 跨域上传
            if (preg_match("/^[\w_]+$/", $_GET["callback"])) {
                echo htmlspecialchars($_GET["callback"]).'('.$result.')';
            } else {
                echo json_encode(
                    [
                        'state' => 'callback参数不合法'
                    ]
                );
            }
        } else {
            exit($result);
        }
    }

    /**
     * 获取远程图片
     */
    private function _get_remote_image() {
        $source = $this->request->param('source');
        $item = [
            "state"    => "",
            "url"      => "",
            "size"     => "",
            "title"    => "",
            "original" => "",
            "source"   => ""
        ];
        $date = date("Ymd");
        $uploadSetting = cmf_get_upload_setting();
        $uploadMaxFileSize = $uploadSetting["image"]['upload_max_filesize'];
        $uploadMaxFileSize = empty($uploadMaxFileSize) ? 2048 : $uploadMaxFileSize;//默认2M
        $allowedExts = explode(',', $uploadSetting["image"]["extensions"]);
        $strSavePath = ROOT_PATH.'public'.DS."ueditor".DS.$date.DS;
        //远程抓取图片配置
        $config = [
            "savePath"   => $strSavePath,            //保存路径
            "allowFiles" => $allowedExts,// [".gif", ".png", ".jpg", ".jpeg", ".bmp"], //文件允许格式
            "maxSize"    => $uploadMaxFileSize                    //文件大小限制，单位KB
        ];
        $storage_setting = cmf_get_cmf_settings('storage');
        $qiniu_domain = $storage_setting['Qiniu']['domain'];
        $no_need_domains = [$qiniu_domain];
        $list = [];
        foreach ($source as $imgUrl) {
            $host = str_replace(['http://', 'https://'], '', $imgUrl);
            $host = explode('/', $host);
            $host = $host[0];
            if (in_array($host, $no_need_domains)) {
                continue;
            }
            $return_img = $item;
            $return_img['source'] = $imgUrl;
            $imgUrl = htmlspecialchars($imgUrl);
            $imgUrl = str_replace("&amp;", "&", $imgUrl);
            //http开头验证
            if (strpos($imgUrl, "http") !== 0) {
                $return_img['state'] = $this->stateMap['ERROR_HTTP_LINK'];
                array_push($list, $return_img);
                continue;
            }
            //获取请求头
            // is_sae()
            if (!cmf_is_sae()) {//SAE下无效
                $heads = get_headers($imgUrl);
                //死链检测
                if (!(stristr($heads[0], "200") && stristr($heads[0], "OK"))) {
                    $return_img['state'] = $this->stateMap['ERROR_DEAD_LINK'];
                    array_push($list, $return_img);
                    continue;
                }
            }
            //格式验证(扩展名验证和Content-Type验证)
            $fileType = strtolower(strrchr($imgUrl, '.'));
            if (!in_array($fileType, $config['allowFiles']) || stristr($heads['Content-Type'], "image")) {
                $return_img['state'] = $this->stateMap['ERROR_HTTP_CONTENTTYPE'];
                array_push($list, $return_img);
                continue;
            }
            //打开输出缓冲区并获取远程图片
            ob_start();
            $context = stream_context_create(
                [
                    'http' => [
                        'follow_location' => false // don't follow redirects
                    ]
                ]
            );
            //请确保php.ini中的fopen wrappers已经激活
            readfile($imgUrl, false, $context);
            $img = ob_get_contents();
            ob_end_clean();
            //大小验证
            $uriSize = strlen($img); //得到图片大小
            $allowSize = 1024 * $config['maxSize'];
            if ($uriSize > $allowSize) {
                $return_img['state'] = $this->stateMap['ERROR_SIZE_EXCEED'];
                array_push($list, $return_img);
                continue;
            }
            $file = uniqid().strrchr($imgUrl, '.');
            $savePath = $config['savePath'];
            $tmpName = $savePath.$file;
            //创建保存位置
            if (!file_exists($savePath)) {
                mkdir("$savePath", 0777, true);
            }
            $file_write_result = cmf_file_write($tmpName, $img);
            if ($file_write_result) {
                if (config('FILE_UPLOAD_TYPE') == 'Qiniu') {
                    //todo qiniu  code
                }
                if (config('FILE_UPLOAD_TYPE') == 'Local') {
                    $file = $strSavePath.$file;
                    $return_img['state'] = 'SUCCESS';
                    $return_img['url'] = $file;
                    array_push($list, $return_img);
                }
            } else {
                $return_img['state'] = $this->stateMap['ERROR_WRITE_CONTENT'];
                array_push($list, $return_img);
            }
        }

        return json_encode(
            [
                'state' => count($list) ? 'SUCCESS' : 'ERROR',
                'list'  => $list
            ]
        );
    }

    /**
     * 文件上传
     *
     * @param string $fileType 文件类型
     *
     * @return string
     */
    private function ueditorUpload($fileType = 'image') {
        $uploader = new Upload();
        $uploader->setFileType($fileType);
        $uploader->setFormName('upfile');
        $result = $uploader->upload();
        if ($result === false) {
            return json_encode(
                [
                    'state' => $uploader->getError()
                ]
            );
        } else {
            return json_encode(
                [
                    'state'    => 'SUCCESS',
                    'url'      => $result['url'],
                    'title'    => $result['name'],
                    'original' => $result['name']
                ]
            );
        }
    }

    /**
     * 获取百度编辑器配置
     */
    private function ueditorConfig() {
        $config_text = preg_replace(
            "/\/\*[\s\S]+?\*\//", "", file_get_contents(STATICSITE."/admin/js/ueditor/config.json")
        );
        $config = json_decode($config_text, true);
        $upload_setting = cmf_get_upload_setting();
        $config['imageMaxSize'] = $upload_setting['file_types']['image']['upload_max_filesize'] * 1024;
        $config['imageAllowFiles'] = array_map(
            [$this, 'ueditorExtension'], explode(",", $upload_setting['file_types']['image']['extensions'])
        );
        $config['scrawlMaxSize'] = $upload_setting['file_types']['image']['upload_max_filesize'] * 1024;
//
        $config['catcherMaxSize'] = $upload_setting['file_types']['image']['upload_max_filesize'] * 1024;
        $config['catcherAllowFiles'] = array_map(
            [$this, 'ueditorExtension'], explode(",", $upload_setting['file_types']['image']['extensions'])
        );
        $config['videoMaxSize'] = $upload_setting['file_types']['video']['upload_max_filesize'] * 1024;
        $config['videoAllowFiles'] = array_map(
            [$this, 'ueditorExtension'], explode(",", $upload_setting['file_types']['video']['extensions'])
        );
        $config['fileMaxSize'] = $upload_setting['file_types']['file']['upload_max_filesize'] * 1024;
        $config['fileAllowFiles'] = array_map(
            [$this, 'ueditorExtension'], explode(",", $upload_setting['file_types']['file']['extensions'])
        );

        return json_encode($config);
    }

    /**
     * 格式化后缀
     *
     * @param $str
     *
     * @return string
     */
    private function ueditorExtension($str) {
        return ".".trim($str, '.');
    }

    /**
     * @function imageManager
     */
    public function imageManager() {
        header("Content-Type: text/html; charset=utf-8");
        //需要遍历的目录列表，最好使用缩略图地址，否则当网速慢时可能会造成严重的延时
        $paths = [C("TMPL_PARSE_STRING.__UPLOAD__"), 'upload/'];
        $files = [];
        foreach ($paths as $path) {
            $tmp = $this->getfiles($path);
            if ($tmp) {
                $files = array_merge($files, $tmp);
            }
        }
        if (!count($files)) {
            return;
        }
        rsort($files, SORT_STRING);
        $str = "";
        foreach ($files as $file) {
            $str .= ROOT_PATH.'/'.$file."ue_separate_ue";
        }
        echo $str;
    }

    /**
     * 遍历获取目录下的指定类型的文件
     *
     * @param       $path
     * @param array $files
     *
     * @return array
     */
    private function getfiles($path, $allowFiles, &$files = []) {
        if (!is_dir($path)) {
            return null;
        }
        if (substr($path, strlen($path) - 1) != '/') {
            $path .= '/';
        }
        $handle = opendir($path);
        while (false !== ($file = readdir($handle))) {
            if ($file != '.' && $file != '..') {
                $path2 = $path.$file;
                if (is_dir($path2)) {
                    $this->getfiles($path2, $allowFiles, $files);
                } else {
                    if (preg_match("/\.(".$allowFiles.")$/i", $file)) {
                        $files[] = [
                            'url'   => substr($path2, strlen($_SERVER['DOCUMENT_ROOT'])),
                            'mtime' => filemtime($path2)
                        ];
                    }
                }
            }
        }

        return $files;
    }
}