file.ctrl.php
4.61 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
<?php
/**
* [WeEngine System] Copyright (c) 2014 WE7.CC
* WeEngine is NOT a free software, it under the license terms, visited http://www.we7.cc/ for more details.
*/
defined('IN_IA') or exit('Access Denied');
$do = in_array($_GPC['do'], array('upload', 'delete')) ? $_GPC['do'] : 'upload';
$type = in_array($_GPC['type'], array('image','audio')) ? $_GPC['type'] : 'image';
$result = array('error' => 1, 'message' => '');
if ($do == 'delete') {
if ($type = 'image') {
$id = intval($_GPC['id']);
if (!empty($id)) {
$attachment = pdo_get('core_attachment', array('id' => $id), array('attachment', 'uniacid', 'uid'));
if (!empty($attachment)) {
if ($attachment['uniacid'] != $_W['uniacid'] || empty($_W['openid']) || (!empty($_W['fans']) && $attachment['uid'] != $_W['fans']['from_user']) || (!empty($_W['member']) && $attachment['uid'] != $_W['member']['uid'])) {
return message(error(1, '无权删除！'), '', 'ajax');
}
load()->func('file');
if ($_W['setting']['remote']['type']) {
$result = file_remote_delete($attachment['attachment']);
} else {
$result = file_delete($attachment['attachment']);
}
if (!is_error($result)) {
pdo_delete('core_attachment', array('id' => $id));
}
if (!is_error($result)) {
return message(error('0'), '', 'ajax');
} else {
return message(error(1, $result['message']), '', 'ajax');
}
} else {
return message(error(1, '图片不存在或已删除！'), '', 'ajax');
}
}
return message($result, '', 'ajax');
}
}
if ($do == 'upload') {
if($type == 'image'){
$setting = $_W['setting']['upload'][$type];
$result = array(
'jsonrpc' => '2.0',
'id' => 'id',
'error' => array('code' => 1, 'message'=>''),
);
load()->func('file');
if (empty($_FILES['file']['tmp_name'])) {
$binaryfile = file_get_contents('php://input', 'r');
if (!empty($binaryfile)) {
mkdirs(ATTACHMENT_ROOT . '/temp');
$tempfilename = random(5);
$tempfile = ATTACHMENT_ROOT . '/temp/' . $tempfilename;
if (file_put_contents($tempfile, $binaryfile)) {
$imagesize = @getimagesize($tempfile);
$imagesize = explode('/', $imagesize['mime']);
$_FILES['file'] = array(
'name' => $tempfilename . '.' . $imagesize[1],
'tmp_name' => $tempfile,
'error' => 0,
);
}
}
}
if (!empty($_FILES['file']['name'])) {
if ($_FILES['file']['error'] != 0) {
$result['error']['message'] = '上传失败，请重试！';
die(json_encode($result));
}
if (!file_is_image($_FILES['file']['name'])) {
$result['message'] = '上传失败, 请重试.';
die(json_encode($result));
}
$ext = pathinfo($_FILES['file']['name'], PATHINFO_EXTENSION);
$ext = strtolower($ext);
$file = file_upload($_FILES['file']);
if (is_error($file)) {
$result['error']['message'] = $file['message'];
die(json_encode($result));
}
$pathname = $file['path'];
$fullname = ATTACHMENT_ROOT . '/' . $pathname;
$thumb = empty($setting['thumb']) ? 0 : 1; $width = intval($setting['width']); if ($thumb == 1 && $width > 0 && (!isset($_GPC['thumb']) || (isset($_GPC['thumb']) && !empty($_GPC['thumb'])))) {
$thumbnail = file_image_thumb($fullname, '', $width);
@unlink($fullname);
if (is_error($thumbnail)) {
$result['message'] = $thumbnail['message'];
die(json_encode($result));
} else {
$filename = pathinfo($thumbnail, PATHINFO_BASENAME);
$pathname = $thumbnail;
$fullname = ATTACHMENT_ROOT .'/'.$pathname;
}
}
$info = array(
'name' => $_FILES['file']['name'],
'ext' => $ext,
'filename' => $pathname,
'attachment' => $pathname,
'url' => tomedia($pathname),
'is_image' => 1,
'filesize' => filesize($fullname),
);
$size = getimagesize($fullname);
$info['width'] = $size[0];
$info['height'] = $size[1];
setting_load('remote');
if (!empty($_W['setting']['remote']['type'])) {
$remotestatus = file_remote_upload($pathname);
if (is_error($remotestatus)) {
$result['message'] = '远程附件上传失败，请检查配置并重新上传';
file_delete($pathname);
die(json_encode($result));
} else {
file_delete($pathname);
$info['url'] = tomedia($pathname);
}
}
pdo_insert('core_attachment', array(
'uniacid' => $uniacid,
'uid' => $_W['uid'],
'filename' => $_FILES['file']['name'],
'attachment' => $pathname,
'type' => $type == 'image' ? 1 : 2,
'createtime' => TIMESTAMP,
));
$info['id'] = pdo_insertid();
die(json_encode($info));
} else {
$result['error']['message'] = '请选择要上传的图片！';
die(json_encode($result));
}
}
}