|
<?php |
|
header('Content-Type: application/json'); |
|
|
|
|
|
$allowed_types = ['image/jpeg', 'image/png', 'image/gif', 'image/webp']; |
|
$max_size = 20 * 1024 * 1024; |
|
|
|
try { |
|
|
|
$upload_dir = __DIR__ . '/uploads/images/'; |
|
if (!is_dir($upload_dir)) { |
|
|
|
if (!mkdir($upload_dir, 0755, true)) { |
|
throw new Exception('无法创建上传目录，请检查权限'); |
|
} |
|
|
|
|
|
$htaccess = $upload_dir . '.htaccess'; |
|
if (!file_exists($htaccess)) { |
|
$htaccess_content = "Options -Indexes\n"; |
|
$htaccess_content .= "DirectoryIndex 403.html\n"; |
|
$htaccess_content .= "AddType text/plain .php\n"; |
|
$htaccess_content .= "AddType text/plain .html\n"; |
|
$htaccess_content .= "AddType text/plain .htm\n"; |
|
$htaccess_content .= "AddType text/plain .htaccess\n"; |
|
file_put_contents($htaccess, $htaccess_content); |
|
} |
|
|
|
|
|
$index_html = $upload_dir . 'index.html'; |
|
if (!file_exists($index_html)) { |
|
file_put_contents($index_html, '<!DOCTYPE html><html><head><title>403 Forbidden</title></head><body><h1>403 Forbidden</h1></body></html>'); |
|
} |
|
|
|
|
|
$forbidden_page = $upload_dir . '403.html'; |
|
if (!file_exists($forbidden_page)) { |
|
file_put_contents($forbidden_page, '<!DOCTYPE html><html><head><title>403 Forbidden</title></head><body><h1>403 Forbidden</h1><p>Access to this directory is forbidden.</p></body></html>'); |
|
} |
|
} |
|
|
|
if (!isset($_FILES['image'])) { |
|
throw new Exception('没有收到图片文件'); |
|
} |
|
|
|
$file = $_FILES['image']; |
|
|
|
|
|
if ($file['error'] !== UPLOAD_ERR_OK) { |
|
throw new Exception('文件上传错误: ' . $file['error']); |
|
} |
|
|
|
|
|
if (!in_array($file['type'], $allowed_types)) { |
|
throw new Exception('不支持的文件类型'); |
|
} |
|
|
|
|
|
if ($file['size'] > $max_size) { |
|
throw new Exception('文件大小超过限制'); |
|
} |
|
|
|
|
|
$extension = strtolower(pathinfo($file['name'], PATHINFO_EXTENSION)); |
|
$filename = uniqid() . '_' . bin2hex(random_bytes(8)) . '.' . $extension; |
|
|
|
|
|
$filepath = $upload_dir . $filename; |
|
if (!move_uploaded_file($file['tmp_name'], $filepath)) { |
|
throw new Exception('文件保存失败'); |
|
} |
|
|
|
|
|
chmod($filepath, 0644); |
|
|
|
|
|
$images_htaccess = $upload_dir . '.htaccess'; |
|
if (!file_exists($images_htaccess)) { |
|
$cache_rules = " |
|
<IfModule mod_expires.c> |
|
ExpiresActive On |
|
ExpiresByType image/jpg \"access plus 1 year\" |
|
ExpiresByType image/jpeg \"access plus 1 year\" |
|
ExpiresByType image/gif \"access plus 1 year\" |
|
ExpiresByType image/png \"access plus 1 year\" |
|
ExpiresByType image/webp \"access plus 1 year\" |
|
</IfModule> |
|
|
|
<IfModule mod_headers.c> |
|
<FilesMatch \"\.(jpg|jpeg|png|gif|webp)$\"> |
|
Header set Cache-Control \"public, max-age=31536000\" |
|
</FilesMatch> |
|
</IfModule> |
|
|
|
Options -Indexes |
|
DirectoryIndex 403.html |
|
AddType text/plain .php |
|
AddType text/plain .html |
|
AddType text/plain .htm |
|
AddType text/plain .htaccess |
|
"; |
|
file_put_contents($images_htaccess, $cache_rules); |
|
} |
|
|
|
|
|
echo json_encode([ |
|
'success' => true, |
|
'url' => '/uploads/images/' . $filename |
|
]); |
|
|
|
} catch (Exception $e) { |
|
error_log('Image upload error: ' . $e->getMessage()); |
|
http_response_code(400); |
|
echo json_encode([ |
|
'success' => false, |
|
'message' => $e->getMessage() |
|
]); |
|
} |
|
|
