cosConfig = array( 'region' => $config['region'], 'schema' => 'https', //协议头部,默认为http 'credentials' => array( 'secretId' => $config['secretId'], 'secretKey' => $config['secretKey'] ) ); } public function index() { Config::set('default_return_type', 'html'); $this->error("当前插件暂无前台页面"); } public function params() { $this->check(); $config = get_addon_config('cos'); $name = $this->request->post('name'); $md5 = $this->request->post('md5'); $chunk = $this->request->post('chunk'); $key = (new Upload())->getSavekey($config['savekey'], $name, $md5); $key = ltrim($key, "/"); $params = [ 'key' => $key, 'md5' => $md5 ]; if ($chunk) { $fileSize = $this->request->post('size'); $oss = new Client($this->cosConfig); $result = $oss->createMultipartUpload(array( 'Bucket' => $config['bucket'], 'Key' => $key, )); $uploadId = $result['UploadId']; $sig = new Signature($config['secretId'], $config['secretKey'], ['signHost' => true]); $partSize = $this->request->post("chunksize"); $i = 0; $size_count = $fileSize; $values = array(); while ($size_count > 0) { $size_count -= $partSize; $values[] = array( $partSize * $i, ($size_count > 0) ? $partSize : ($size_count + $partSize), ); $i++; } $params['key'] = $key; $params['uploadId'] = $uploadId; $params['partsAuthorization'] = []; $date = gmdate('D, d M Y H:i:s \G\M\T'); foreach ($values as $index => $part) { $partNumber = $index + 1; $options = array( 'Bucket' => $config['bucket'], 'Key' => $key, 'UploadId' => $uploadId, 'PartNumber' => $partNumber, 'Body' => '' ); $command = $oss->getCommand('uploadPart', $options); $request = $oss->commandToRequestTransformer($command); $authorization = $sig->createAuthorization($request); $params['partsAuthorization'][$index] = $authorization; } $params['date'] = $date; } else { if ($config['uploadmode'] == 'client') { $expiretime = time() + $config['expire']; $expiration = gmdate("Y-m-d\TH:i:s.414\Z", $expiretime); $keytime = (time() - 60) . ';' . $expiretime; $policy = json_encode([ 'expiration' => $expiration, 'conditions' => [ ['q-sign-algorithm' => 'sha1'], ['q-ak' => $config['secretId']], ['q-sign-time' => $keytime] ] ]); $signature = hash_hmac('sha1', sha1($policy), hash_hmac('sha1', $keytime, $config['secretKey'])); $params = [ 'key' => $key, 'policy' => base64_encode($policy), 'q-sign-algorithm' => 'sha1', 'q-ak' => $config['secretId'], 'q-key-time' => $keytime, 'q-sign-time' => $keytime, 'q-signature' => $signature ]; } } $this->success('', null, $params); return; } /** * 服务器中转上传文件 * 上传分片 * 合并分片 * @param bool $isApi */ public function upload($isApi = false) { if ($isApi === true) { if (!Auth::isModuleAllow()) { $this->error("请登录后再进行操作"); } } else { $this->check(); } $config = get_addon_config('cos'); $oss = new Client($this->cosConfig); //检测删除文件或附件 $checkDeleteFile = function ($attachment, $upload, $force = false) use ($config) { //如果设定为不备份则删除文件和记录 或 强制删除 if ((isset($config['serverbackup']) && !$config['serverbackup']) || $force) { if ($attachment && !empty($attachment['id'])) { $attachment->delete(); } if ($upload) { //文件绝对路径 $filePath = $upload->getFile()->getRealPath() ?: $upload->getFile()->getPathname(); @unlink($filePath); } } }; $chunkid = $this->request->post("chunkid"); if ($chunkid) { $action = $this->request->post("action"); $chunkindex = $this->request->post("chunkindex/d"); $chunkcount = $this->request->post("chunkcount/d"); $filesize = $this->request->post("filesize"); $filename = $this->request->post("filename"); $method = $this->request->method(true); $key = $this->request->post("key"); $uploadId = $this->request->post("uploadId"); if ($action == 'merge') { $attachment = null; $upload = null; //合并分片 if ($config['uploadmode'] == 'server') { //合并分片文件 try { $upload = new Upload(); $attachment = $upload->merge($chunkid, $chunkcount, $filename); } catch (UploadException $e) { $this->error($e->getMessage()); } } $etags = $this->request->post("etags/a", []); if (count($etags) != $chunkcount) { $checkDeleteFile($attachment, $upload, true); $this->error("分片数据错误"); } $listParts = []; for ($i = 0; $i < $chunkcount; $i++) { $listParts[] = array("PartNumber" => $i + 1, "ETag" => $etags[$i]); } try { $result = $oss->completeMultipartUpload( array( 'Bucket' => $config['bucket'], 'Key' => $key, 'UploadId' => $uploadId, 'Parts' => $listParts ) ); } catch (\Exception $e) { $checkDeleteFile($attachment, $upload, true); $this->error($e->getMessage()); } if (!isset($result['Key'])) { $checkDeleteFile($attachment, $upload, true); $this->error("上传失败"); } else { $checkDeleteFile($attachment, $upload); $this->success("上传成功", '', ['url' => "/" . $key, 'fullurl' => cdnurl("/" . $key, true)]); } } else { //默认普通上传文件 $file = $this->request->file('file'); try { $upload = new Upload($file); $file = $upload->chunk($chunkid, $chunkindex, $chunkcount); } catch (UploadException $e) { $this->error($e->getMessage()); } try { $params = array( 'Bucket' => $config['bucket'], 'Key' => $key, 'UploadId' => $uploadId, 'PartNumber' => $chunkindex + 1, 'Body' => $file->fread($file->getSize()) ); $ret = $oss->uploadPart($params); $etag = $ret['ETag']; } catch (\Exception $e) { $this->error($e->getMessage()); } $this->success("上传成功", "", [], 3, ['ETag' => $etag]); } } else { $attachment = null; //默认普通上传文件 $file = $this->request->file('file'); try { $upload = new Upload($file); $attachment = $upload->upload(); } catch (UploadException $e) { $this->error($e->getMessage()); } //文件绝对路径 $filePath = $upload->getFile()->getRealPath() ?: $upload->getFile()->getPathname(); $url = $attachment->url; try { $ret = $oss->upload($config['bucket'], ltrim($attachment->url, "/"), $upload->getFile()); //成功不做任何操作 } catch (\Exception $e) { $checkDeleteFile($attachment, $upload, true); $this->error("上传失败"); } $checkDeleteFile($attachment, $upload); // 记录云存储记录 $data = $attachment->toArray(); unset($data['id']); $data['storage'] = 'cos'; Attachment::create($data, true); $this->success("上传成功", '', ['url' => $url, 'fullurl' => cdnurl($url, true),'filename' => $attachment->filename]); } return; } /** * 回调 */ public function notify() { $this->check(); $config = get_addon_config('cos'); if ($config['uploadmode'] != 'client') { $this->error("无需执行该操作"); } $this->request->filter('trim,strip_tags,htmlspecialchars,xss_clean'); $size = $this->request->post('size/d'); $name = $this->request->post('name', ''); $md5 = $this->request->post('md5', ''); $type = $this->request->post('type', ''); $url = $this->request->post('url', ''); $width = $this->request->post('width/d'); $height = $this->request->post('height/d'); $category = $this->request->post('category', ''); $category = array_key_exists($category, config('site.attachmentcategory') ?? []) ? $category : ''; $suffix = strtolower(pathinfo($name, PATHINFO_EXTENSION)); $suffix = $suffix && preg_match("/^[a-zA-Z0-9]+$/", $suffix) ? $suffix : 'file'; $attachment = Attachment::where('url', $url)->where('storage', 'cos')->find(); if (!$attachment) { $params = array( 'category' => $category, 'admin_id' => (int)session('admin.id'), 'user_id' => (int)cookie('uid'), 'filesize' => $size, 'filename' => $name, 'imagewidth' => $width, 'imageheight' => $height, 'imagetype' => $suffix, 'imageframes' => 0, 'mimetype' => $type, 'url' => $url, 'uploadtime' => time(), 'storage' => 'cos', 'sha1' => $md5, ); Attachment::create($params, true); } $this->success(); return; } /** * 检查签名是否正确或过期 */ protected function check() { $costoken = $this->request->post('costoken', '', 'trim'); if (!$costoken) { $this->error("参数不正确(code:1)"); } $config = get_addon_config('cos'); list($appId, $sign, $data) = explode(':', $costoken); if (!$appId || !$sign || !$data) { $this->error("参数不正确(code:2)"); } if ($appId !== $config['appId']) { $this->error("参数不正确(code:3)"); } if ($sign !== base64_encode(hash_hmac('sha1', base64_decode($data), $config['secretKey'], true))) { $this->error("签名不正确"); } $json = json_decode(base64_decode($data), true); if ($json['deadline'] < time()) { $this->error("请求已经超时"); } } }