danci/www.hanlinyuanonline.com/Application/Admin/Controller/UeditorController.class.php

<?php
/**
* 百度编辑器控制器
*/
namespace Admin\Controller;
use Think\Controller;
class UeditorController extends Controller{
	
	private $thumb;//缩略图模式(看手册)
	private $water;	//是否加水印(0:无水印,1:水印文字,2水印图片)
	private $waterText;//水印文字
	private $waterPosition;//水印位置
	private $savePath; //保存位置
	private $userid; //操作用户名


	public function _initialize(){
		$this->userid=empty($_SESSION['userid'])? $_GET['userid'] : $_SESSION['userid'];
		if(empty($this->userid)){
			$this->userid= 'anonymity';
		}

		$this->rootPath= './Public/uploads/';
		$this->savePath='';
		$this->thumb=1;
		$this->water=1;
		$this->waterText='逐日软件';
 		$this->waterPosition= 9;
	}

	public function index(){
		$CONFIG = json_decode(preg_replace("/\/\*[\s\S]+?\*\//", "", file_get_contents(CONF_PATH."config.json")), true);

		$action = htmlspecialchars($_GET['action']);
		switch ($action) {
		    case 'config':
		        $result =  json_encode($CONFIG);
		        break;

		    /* 上传图片 */
		    case 'uploadimage':
		        $config = array(
		            "pathFormat" => $CONFIG['imagePathFormat'],
		            "maxSize" => $CONFIG['imageMaxSize'],
		            "allowFiles" => $CONFIG['imageAllowFiles']
		        );
		        $fieldName = $CONFIG['imageFieldName'];
		        $result=$this->upFile($config, $fieldName);
		        break;

		    /* 上传涂鸦 */
		    case 'uploadscrawl':
		        $config = array(
		            "pathFormat" => $CONFIG['scrawlPathFormat'],
		            "maxSize" => $CONFIG['scrawlMaxSize'],
		            "allowFiles" => $CONFIG['scrawlAllowFiles'],
		            "oriName" => "scrawl.png"
		        );
		        $fieldName = $CONFIG['scrawlFieldName'];
		        $base64 = "base64";
		        $result=$this->upBase64($config,$fieldName);
		        break;

		    /* 上传视频 */
		    case 'uploadvideo':
		        $config = array(
		            "pathFormat" => $CONFIG['videoPathFormat'],
		            "maxSize" => $CONFIG['videoMaxSize'],
		            "allowFiles" => $CONFIG['videoAllowFiles']
		        );
		        $fieldName = $CONFIG['videoFieldName'];
		        $result=$this->upFile($config, $fieldName);
		        break;

		    /* 上传文件 */
		    case 'uploadfile':
		    // default:
		        $config = array(
		            "pathFormat" => $CONFIG['filePathFormat'],
		            "maxSize" => $CONFIG['fileMaxSize'],
		            "allowFiles" => $CONFIG['fileAllowFiles']
		        );
		        $fieldName = $CONFIG['fileFieldName'];
		        $result=$this->upFile($config, $fieldName);
		        break;

		    /* 列出图片 */
		    case 'listimage':
			$allowFiles = $CONFIG['imageManagerAllowFiles'];
			$listSize = $CONFIG['imageManagerListSize'];
			$path = $CONFIG['imageManagerListPath'];
			$get=$_GET;
			$result =$this->file_list($allowFiles, $listSize, $get);
		        	break;
		    /* 列出文件 */
		    case 'listfile':
			$allowFiles = $CONFIG['fileManagerAllowFiles'];
			$listSize = $CONFIG['fileManagerListSize'];
			$path = $CONFIG['fileManagerListPath'];
			$get=$_GET;
			$result =$this->file_list($allowFiles, $listSize, $get);
	    	            break;

		    /* 抓取远程文件 */
		    case 'catchimage':
		    	$config = array(
			    "pathFormat" => $CONFIG['catcherPathFormat'],
			    "maxSize" => $CONFIG['catcherMaxSize'],
			    "allowFiles" => $CONFIG['catcherAllowFiles'],
			    "oriName" => "remote.png"
			);
			$fieldName = $CONFIG['catcherFieldName'];
			/* 抓取远程图片 */
			$list = array();
			if (isset($_POST[$fieldName])) {
			    $source = $_POST[$fieldName];
			} else {
			    $source = $_GET[$fieldName];
			}
			foreach ($source as $imgUrl) {
			    $info=json_decode($this->saveRemote($config, $imgUrl),true);
			    // dump($info);
			    array_push($list, array(
			        "state" => $info["state"],
			        "url" => $info["url"],
			        "size" => $info["size"],
			        "title" => htmlspecialchars($info["title"]),
			        "original" => htmlspecialchars($info["original"]),
			        "source" => htmlspecialchars($imgUrl)
			    ));
			}

			$result= json_encode(array(
			    'state'=> count($list) ? 'SUCCESS':'ERROR',
			    'list'=> $list
			));
		        break;

		    default:
		        $result = json_encode(array(
		            'state'=> '请求地址出错'
		        ));
		        break;
		}

		/* 输出结果 */
		if (isset($_GET["callback"])) {
		    if (preg_match("/^[\w_]+$/", $_GET["callback"])) {
		        echo htmlspecialchars($_GET["callback"]) . '(' . $result . ')';
		    } else {
		        echo json_encode(array(
		            'state'=> 'callback参数不合法'
		        ));
		    }
		} else {
		    echo $result;
		}

	}
	/**
	     * 上传文件的主处理方法
	     * @return mixed
	     */
	private function upFile($config,$fieldName){
		$conf=array(
			'rootPath' => $this->rootPath,
			'savePath' => $this->savePath,
			'autoSub' => true,
			'subName'=>$this->userid . '/' . date('Ym',time()) ,// 子目录命名的规则为 用户名/年月/
			'maxSize'=>$config['maxSize'],
			'exts'=>$this->format_exts($config['allowFiles']),//去除扩展名前的点 .
			);

		$upload=new \Think\Upload($conf);
		$info=$upload->uploadOne($_FILES[$fieldName]);
		if($info){
			$fname=$upload->rootPath .$info['savepath'].$info['savename'];
			$imagearr = explode(',', 'jpg,gif,png,jpeg,bmp,ttf,tif'); 
			$info['ext']= strtolower($info['ext']);

			$isimage = in_array($info['ext'],$imagearr) ? 1 : 0;
			if ($isimage) {
				$image=new \Think\Image();
				$image->Open($fname);
				$image->thumb(680,680,$this->thumb)->save($fname);
				if ($this->water==1) {
					$image->text($this->waterText,'./Public/font/STXINGKA.TTF',18,'#9a9a9a',$this->waterPosition,array(-2,0))->save($fname); 
				}
				if ($this->water==2) {
					$image->water($this->waterImage)->save($fname);
				}	
			}

			$data=array(
				'state'=>'SUCCESS',
				//'url'=>__ROOT__. strtolower(substr($fname,1)),
			    'url'=>C('WEB_HOST'). strtolower(substr($fname,1)),
				'title'=>$info['savename'],
				'original'=>$info['name'],
				'type'=>'.' . $info['ext'],
				'size'=>$info['size'],
				);
		}else{
			$data=array(
				'state'=>$upload->getError(),
				);
		}
		return json_encode($data);
	}

	/**
	 * 处理base64编码的图片上传
	 * @return mixed
	 */
	private function upBase64($config,$fieldName)
	{
	    $base64Data = $_POST[$fieldName];
	    $img = base64_decode($base64Data);

	    $dirname=$this->rootPath . $this->savePath . $this->userid . '/scrawl/';
	    $file['filesize']=strlen($img);
	    $file['oriName']=$config['oriName'];
	    $file['ext']=strtolower(strrchr($config['oriName'], '.'));
	    $file['name']= uniqid() .  $file['ext'];
	    $file['fullName']=$dirname . $file['name'];
	    $fullName=$file['fullName'];
	    // dump($file);

 	//检查文件大小是否超出限制
	    if ($file['filesize'] >= ($config["maxSize"])) {
  		$data=array(
			'state'=>'文件大小超出网站限制',
		);
		return json_encode($data);
	    }

	    //创建目录失败
	    if (!file_exists($dirname) && !mkdir($dirname, 0777, true)) {
	           $data=array(
			'state'=>'目录创建失败',
		);
		return json_encode($data);
	    } else if (!is_writeable($dirname)) {
	         $data=array(
			'state'=>'目录没有写权限',
		);
		return json_encode($data);
	    }

	    //移动文件
	    if (!(file_put_contents($fullName, $img) && file_exists($fullName))) { //移动失败
        	         $data=array(
		'state'=>'写入文件内容错误',
		);
	    } else { //移动成功	       
	        	$data=array(
			'state'=>'SUCCESS',
			'url'=>__ROOT__ . substr($file['fullName'],1),
			'title'=>$file['name'],
			'original'=>$file['oriName'],
			'type'=>$file['ext'],
			'size'=>$file['filesize'],
		);
	    }
	    return json_encode($data);
	}

	/**
	 * 拉取远程图片
	 * @return mixed
	 */
	private function saveRemote($config, $fieldName)
	{
	    $imgUrl = htmlspecialchars($fieldName);
	    $imgUrl = str_replace("&amp;", "&", $imgUrl);

	    //http开头验证
	    if (strpos($imgUrl, "http") !== 0) {
	         $data=array(
		'state'=>'链接不是http链接',
		);
	         return json_encode($data);
	    }
	    //获取请求头并检测死链
	    $heads = get_headers($imgUrl);
	    if (!(stristr($heads[0], "200") && stristr($heads[0], "OK"))) {
	         $data=array(
		'state'=>'链接不可用',
		);
	         return json_encode($data);
	    }
	    //格式验证(扩展名验证和Content-Type验证)
	    $fileType = strtolower(strrchr($imgUrl, '.'));
	    if (!in_array($fileType, $config['allowFiles']) || stristr($heads['Content-Type'], "image")) {
	        $data=array(
		'state'=>'链接contentType不正确',
		);
	         return json_encode($data);
	    }

	    //打开输出缓冲区并获取远程图片
	    ob_start();
	    $context = stream_context_create(
	        array('http' => array(
	            'follow_location' => false // don't follow redirects
	        ))
	    );
	    readfile($imgUrl, false, $context);
	    $img = ob_get_contents();
	    ob_end_clean();
	    preg_match("/[\/]([^\/]*)[\.]?[^\.\/]*$/", $imgUrl, $m);

	    $dirname=$this->rootPath . $this->savePath . $this->userid . '/remote/';
	    $file['oriName']=$m ? $m[1]:"";
	    $file['filesize']=strlen($img);
	    $file['ext']=strtolower(strrchr($config['oriName'], '.'));
	    $file['name']= uniqid() .  $file['ext'];
	    $file['fullName']=$dirname . $file['name'];
	    $fullName=$file['fullName'];

	    //检查文件大小是否超出限制
	    if ($file['filesize'] >= ($config["maxSize"])) {
  		$data=array(
			'state'=>'文件大小超出网站限制',
		);
		return json_encode($data);
	    }

	    //创建目录失败
	    if (!file_exists($dirname) && !mkdir($dirname, 0777, true)) {
  		$data=array(
			'state'=>'目录创建失败',
		);
		return json_encode($data);
	    } else if (!is_writeable($dirname)) {
  		$data=array(
			'state'=>'目录没有写权限',
		);
		return json_encode($data);
	    }

	    //移动文件
	    if (!(file_put_contents($fullName, $img) && file_exists($fullName))) { //移动失败
  		$data=array(
			'state'=>'写入文件内容错误',
		);
		return json_encode($data);
	    } else { //移动成功
	       	 $data=array(
			'state'=>'SUCCESS',
			'url'=>__ROOT__ . substr($file['fullName'],1),
			'title'=>$file['name'],
			'original'=>$file['oriName'],
			'type'=>$file['ext'],
			'size'=>$file['filesize'],
		);
	    }
	    return json_encode($data);
	}
	private function file_list($allowFiles, $listSize, $get){
		$dirname=$this->rootPath . $this->savePath ;
		if ($this->userid!='admin') {
			$dirname.=$this->userid . '/';
		}
		$allowFiles = substr(str_replace(".", "|", join("", $allowFiles)), 1);

		/* 获取参数 */
		$size = isset($get['size']) ? htmlspecialchars($get['size']) : $listSize;
		$start = isset($get['start']) ? htmlspecialchars($get['start']) : 0;
		$end = $start + $size;

		/* 获取文件列表 */
		// $path = $_SERVER['DOCUMENT_ROOT'] . (substr($path, 0, 1) == "/" ? "":"/") . $path;
		$path=$dirname;
		$files = $this->getfiles($path, $allowFiles);
		if (!count($files)) {
		    return json_encode(array(
		        "state" => "no match file",
		        "list" => array(),
		        "start" => $start,
		        "total" => count($files)
		    ));
		}

		/* 获取指定范围的列表 */
		$len = count($files);
		for ($i = min($end, $len) - 1, $list = array(); $i < $len && $i >= 0 && $i >= $start; $i--){
		    $list[] = $files[$i];
		}
		//倒序
		//for ($i = $end, $list = array(); $i < $len && $i < $end; $i++){
		//    $list[] = $files[$i];
		//}

		/* 返回数据 */
		$result = json_encode(array(
		    "state" => "SUCCESS",
		    "list" => $list,
		    "start" => $start,
		    "total" => count($files)
		));

		return $result;
	}

   	 /**
	     * 遍历获取目录下的指定类型的文件
	     * @param $path
	     * @param array $files
	     * @return array
	     */
	    private function getfiles( $path , $allowFiles, &$files = array() ) {
	        if ( !is_dir( $path ) ) return null;
	        if(substr($path, strlen($path) - 1) != '/') $path .= '/';
	        $handle = opendir( $path);
	        while ( false !== ( $file = readdir( $handle ) ) ) {
	            if ( $file != '.' && $file != '..' ) {
	                $path2 = $path . $file;
	                if ( is_dir( $path2)) {
	                    $this->getfiles( $path2 ,$allowFiles,  $files );
	                } else {
		                if (preg_match("/\.(".$allowFiles.")$/i", $file)) {
		                    $files[] = array(
		                        'url'=> __ROOT__ . substr($path2, 1),
		                        'mtime'=> filemtime($path2)
		                    );
		                }
	                }
	            }
	        }
	        return $files;
	    }
	    /**
	     * [formatUrl 格式化url，用于将getfiles返回的文件路径进行格式化，起因是中文文件名的不支持浏览]
	     * @param  [type] $files [文件数组]
	     * @return [type]        [格式化后的文件数组]
	     */
	    private function formatUrl($files){
	    	if(!is_array($files)) return $files;
	    	foreach ($files as  $key => $value) {
	    		$data=array();
	    		$data=explode('/', $value);
	    		foreach ($data as $k=>$v) {
	    			if($v!='.' && $v!='..'){
	    				$data[$k]=urlencode($v);
	    				$data[$k] = str_replace("+", "%20", $data[$k]); 
	    			}
	    		}
	    		$files[$key]=implode('/', $data);
	    	}
	    	return $files;
	    }	


	private function format_exts($exts){
		$data=array();
		foreach ($exts as $key => $value) {
			$data[]=ltrim($value,'.');
		}
		return $data;
	}

}
?>