Community Learn Tools Library Leisure
search
English
Home > List of blog posts > PHP文件上传
Blogger Information
Blog 43
fans 1
comment 0
visits 33839
Special Recommendation
More>
Related recommendations
Popular Tutorials
More>
Related Tutorials
Popular Recommendations
Latest courses
Latest Downloads
More>
Web Effects
Website Source Code
Website Materials
Front End Template
PHP文件上传
蔚蓝世纪
Original
796 people have browsed it

通过PHP，用户可以把文件上传到服务器。文件上传可以分为单个文件上传、多个文件上传和批量上传。

一、单个文件上传

  1. <?php
  2. //$_FILES
  3. printf('<pre>%s</pre>',print_r($_FILES,true));
  4. $errorCode=$_FILES['my_pic']['error'];
  5. // 检查是否有文件被上传
  6. if(UPLOAD_ERR_NO_FILE === $errorCode) echo '<p>没有文件被上传</p>';
  7. foreach ($_FILES as $file) {
  8.     // 只要判断 error === 0 
  9.     if ($file['error'] === 0) {
  10.         $destFile = 'uploads/' . $file['name'];
  11.         move_uploaded_file($file['tmp_name'], $destFile);
  12.         echo "<img src='{$destFile}' width='200'>";
  13.     }
  14. }
  16. //检测当前文件是否是通过HTTP POST方式上传的
  17. // $tmpFileName = $_FILES['my_pic']['tmp_name'];
  18. // $orginalFileName = $_FILES['my_pic']['name'];
  19. // if (is_uploaded_file($tmpFileName)) echo "{$orginalFileName}:上传方式合法";
  21. //检测文件类型
  22. //$fileType = $_FILES['my_pic']['type'];
  23. //echo $fileType,'<br>';
  24. //if (strstr($fileType,'/',true) !== 'image') echo '<p>文件类型错误</p>';
  26. //检测上传文件的大小
  27. echo ini_get('upload_max_filesize');
  28. $errorCode = $_FILES['my_pic']['error'] ?? 'null';
  29. switch ($errorCode) {
  30.     case 1:
  31.         echo '文件超过`php.ini`中`upload_max_filesize`值';
  32.     break;
  33.     case 2:
  34.         echo '文件大小超过表单隐藏域中`MAX_FILE_SIZE`指定的值';
  35. }
  37. //文件上传异常处理
  38. class UploadException extends Exception
  39. {
  40. // 在异常子类中,可以访问并重写Exception中的四个属性,通过__toString()格式化异常输出信息
  41.     public function __toString()
  42.     {
  43.         return <<< UPLOAD
  44. <style>
  45. table {border-collapse: collapse;border:1px solid black;text-align: center;}
  46. td {border:1px solid black;padding: 5px;}
  47. tr:first-of-type {background-color:#eee;}
  48. tr:last-of-type td {color: coral;}
  49. </style>
  50. <table>
  51. <tr><td>代码</td><td>信息</td><td>文件</td><td>行号</td></tr>
  52. <tr><td>$this->code</td><td>$this->message</td><td>$this->file</td><td>$this->line</td></tr>
  53. </table>
  54. UPLOAD;
  55.     }
  56. }
  58. ///////////////////////////////////////////////////////////////////////
  59. try {
  60.     // 上传出错的代码
  61.     $errorCode = $_FILES['my_pic']['error'];
  62.     if ($errorCode > UPLOAD_ERR_OK) {
  63.         switch ($errorCode) {
  64.             case UPLOAD_ERR_INI_SIZE:
  65.                 throw new UploadException('上传的文件超过了 php.ini 中 upload_max_filesize 选项限制的值', 1);
  66.             break;
  67.             case UPLOAD_ERR_FORM_SIZE:
  68.                 throw new UploadException('上传文件的大小超过了 HTML 表单中 MAX_FILE_SIZE 选项指定的值', 2);
  69.                 break;
  70.             case UPLOAD_ERR_PARTIAL:
  71.                 throw new UploadException('文件只有部分被上传', 3);
  72.                 break;
  73.             case UPLOAD_ERR_NO_FILE:
  74.                 throw new UploadException('没有文件被上传', 4);
  75.                 break;
  76.             case UPLOAD_ERR_NO_TMP_DIR:
  77.                 throw new UploadException('找不到临时文件夹', 6);
  78.                 break;
  79.             case UPLOAD_ERR_CANT_WRITE:
  80.                 throw new UploadException('文件写入失败', 7);
  81.                 break;
  82.             default:
  83.                 // 测试时建议关掉default: 避免误报影响
  84.                 throw new UploadException('未知类型错误', 8);
  85.         }
  86.     }
  88.     // 判断文件类型
  89.     $fileType = $_FILES['my_pic']['type'];
  90.     if (strstr($fileType, '/', true) !== 'image') throw new UploadException('文件类型错误',9);
  91. } catch (UploadException $e) {
  92.     echo $e;
  93. }
  94. ?>
  96. <!DOCTYPE html>
  97. <html lang="en">
  98. <head>
  99.     <meta charset="UTF-8">
  100.     <meta name="viewport" content="width=device-width, initial-scale=1.0">
  101.     <title>文件上传变量$_FILES</title>
  102. </head>
  103. <body>
  104.     <!-- 上传文件时通常会写一个表单 -->
  105.     <form action="" method="POST" enctype="multipart/form-data">
  106.     <fieldset>
  107.     <legend>单文件上传</legend>
  108.     <input type="hidden" name="MAX_FILE_SIZE" value="500000">
  109.     <input type="file" name="my_pic">
  110.     <button>上传</button>
  111.     </fieldset>
  112.     </form>
  113. </body>
  114. </html>

输出效果：

二、多个文件上传

  1. <?php
  2. // $_FILES
  3. printf('<pre>%s</pre>', print_r($_FILES, true));
  4. //文件上传异常处理
  5. class UploadException extends Exception
  6. {
  7.     // 在异常子类中,可以访问并重写Exception中的四个属性,通过__toString()格式化异常输出信息
  8.     public function __toString()
  9.     {
  10.         return <<< UPLOAD
  11. <style>
  12. table {border-collapse: collapse;border:1px solid black;text-align: center;}
  13. td {border:1px solid black;padding: 5px;}
  14. tr:first-of-type {background-color:#eee;}
  15. tr:last-of-type td {color: coral;}
  16. </style>
  17. <table>
  18. <tr><td>代码</td><td>信息</td><td>文件</td><td>行号</td></tr>
  19. <tr><td>$this->code</td><td>$this->message</td><td>$this->file</td><td>$this->line</td></tr>
  20. </table>
  21. UPLOAD;
  22.     }
  23. }
  25. ///////////////////////////////////////////////////////////////////////
  26. try {
  27.     // 上传出错的代码
  28.     $errorCode = $_FILES['my_pic']['error'];
  29.     if ($errorCode > UPLOAD_ERR_OK) {
  30.         switch ($errorCode) {
  31.             case UPLOAD_ERR_INI_SIZE:
  32.                 throw new UploadException('上传的文件超过了 php.ini 中 upload_max_filesize 选项限制的值', 1);
  33.             break;
  34.             case UPLOAD_ERR_FORM_SIZE:
  35.                 throw new UploadException('上传文件的大小超过了 HTML 表单中 MAX_FILE_SIZE 选项指定的值', 2);
  36.                 break;
  37.             case UPLOAD_ERR_PARTIAL:
  38.                 throw new UploadException('文件只有部分被上传', 3);
  39.                 break;
  40.             case UPLOAD_ERR_NO_FILE:
  41.                 throw new UploadException('没有文件被上传', 4);
  42.                 break;
  43.             case UPLOAD_ERR_NO_TMP_DIR:
  44.                 throw new UploadException('找不到临时文件夹', 6);
  45.                 break;
  46.             case UPLOAD_ERR_CANT_WRITE:
  47.                 throw new UploadException('文件写入失败', 7);
  48.                 break;
  49.             default:
  50.                 // 测试时建议关掉default: 避免误报影响
  51.                 throw new UploadException('未知类型错误', 8);
  52.         }
  53.     }
  55.     // 判断文件类型
  56.     $fileType = $_FILES['my_pic']['type'];
  57.     if (strstr($fileType, '/', true) !== 'image') throw new UploadException('文件类型错误',9);
  58. } catch (UploadException $e) {
  59.     echo $e;
  60. }
  61. foreach ($_FILES as $file) {
  62.     if ($file['error'] === 0) {
  63.         $destFile = 'uploads/' . $file['name'];
  64.         move_uploaded_file($file['tmp_name'], $destFile);
  65.         echo "<img src='{$destFile}' width='200'>";
  66.     }
  67. }
  69. ?>
  70. <!DOCTYPE html>
  71. <html lang="en">
  72. <head>
  73.     <meta charset="UTF-8">
  74.     <meta name="viewport" content="width=device-width, initial-scale=1.0">
  75.     <title>文件上传变量$_FILES</title>
  76. </head>
  77. <body>
  78.     <hr>
  79.     <form action="" method="POST" enctype="multipart/form-data">
  80.     <fieldset>
  81.         <legend>多文件上传: 逐个上传(一)</legend>
  82.         <input type="hidden" name="MAX_FILE_SIZE" value="3000000">
  83.         <input type="file" name="my_pic1">
  84.         <input type="file" name="my_pic2">
  85.         <input type="file" name="my_pic3">
  86.         <button>上传</button>
  87.     </fieldset>
  88.     </form>
  89. </body>
  90. </html>

输出效果：

三、批量上传文件

  1. printf('<pre>%s</pre>', print_r($_FILES, true));
  2. //文件上传异常处理
  3. class UploadException extends Exception
  4. {
  5.     public function __toString()
  6.     {
  7.         return <<< UPLOAD
  8. <style>
  9. table {border-collapse: collapse;border:1px solid black;text-align: center;}
  10. td {border:1px solid black;padding: 5px;}
  11. tr:first-of-type {background-color:#eee;}
  12. tr:last-of-type td {color: coral;}
  13. </style>
  14. <table>
  15. <tr><td>代码</td><td>信息</td><td>文件</td><td>行号</td></tr>
  16. <tr><td>$this->code</td><td>$this->message</td><td>$this->file</td><td>$this->line</td></tr>
  17. </table>
  18. UPLOAD;
  19.     }
  20. }
  22. ///////////////////////////////////////////////////////////////////////
  23. try {
  24.     // 上传出错的代码
  25. $errorCode = $_FILES['my_pic']['error'];
  26. if ($errorCode > UPLOAD_ERR_OK) {
  27. switch ($errorCode) {
  28. case UPLOAD_ERR_INI_SIZE:
  29. throw new UploadException('上传的文件超过了 php.ini 中 upload_max_filesize 选项限制的值', 1);
  30. break;
  31. case UPLOAD_ERR_FORM_SIZE:
  32. throw new UploadException('上传文件的大小超过了 HTML 表单中 MAX_FILE_SIZE 选项指定的值', 2);
  33. break;
  34. case UPLOAD_ERR_PARTIAL:
  35. throw new UploadException('文件只有部分被上传', 3);
  36. break;
  37. case UPLOAD_ERR_NO_FILE:
  38. throw new UploadException('没有文件被上传', 4);
  39. break;
  40. case UPLOAD_ERR_NO_TMP_DIR:
  41. throw new UploadException('找不到临时文件夹', 6);
  42. break;
  43. case UPLOAD_ERR_CANT_WRITE:
  44. throw new UploadException('文件写入失败', 7);
  45. break;
  46. default:
  47. throw new UploadException('未知类型错误', 8);
  48.     }
  49. }
  51.     // 判断文件类型
  52.     $fileType = $_FILES['my_pic']['type'];
  53.     if (strstr($fileType, '/', true) !== 'image') throw new UploadException('文件类型错误',9);
  54. } catch (UploadException $e) {
  55.     echo $e;
  56. }
  57. if ($_FILES['my_pic'])
  58. foreach ($_FILES['my_pic']['error'] as $key => $error) {
  59. // 只要判断 error === 0 
  60. if ($error === UPLOAD_ERR_OK) {
  61. // 临时文件名
  62. $tmpFileName = $_FILES['my_pic']['tmp_name'][$key];
  63. // 原始文件名
  64. $originalFileName = $_FILES['my_pic']['name'][$key];
  65. // 目标文件名
  66. $destFileName = 'uploads/'. $originalFileName;
  67. // 移动文件
  68. move_uploaded_file($tmpFileName, $destFileName);
  69. // 预览
  70.        echo "<img src='{$destFileName}' width='200'>";
  71.     }
  72. }
  74. ?>
  75. <!DOCTYPE html>
  76. <html lang="en">
  77. <head>
  78.     <meta charset="UTF-8">
  79.     <meta name="viewport" content="width=device-width, initial-scale=1.0">
  80.     <title>文件上传变量$_FILES</title>
  81. </head>
  82. <body>
  83.     <hr>
  84.     <form action="" method="POST" enctype="multipart/form-data">
  85.     <fieldset>
  86.         <legend>多文件上传: 批量上传</legend>
  87.         <input type="hidden" name="MAX_FILE_SIZE" value="3000000">
  88.         <!-- 将name属性值以数组的形式提供 -->
  89.         <input type="file" name="my_pic[]" multiple>
  90.         <button>上传</button>
  91.     </fieldset>
  92.     </form>
  93. </body>
  94. </html>

输出效果：

四、总结

1.允许用户上传文件对于网站来说存在着巨大的安全风险，所以只能允许可信的用户执行文件上传操作。
2.上传文件时，会在服务器的 PHP 临时文件夹创建一个被上传文件的临时副本。这个临时的复制文件会在脚本结束时消失，所以要保存被上传的文件，我们需要把它拷贝到另外的位置。示例中，我们把文件保存到了名为 “upload” 的新文件夹。

Correcting teacher：天蓬老师天蓬老师

Correction status：qualified

Teacher's comments：总结很棒, 文件上传的确有着巨大的风险 , 但也是获取用户数据的重要手段, 因为很多网站都要依赖用户自产内容来维持的, 不是吗?正是因为大量用户上传自己数据 , 才让互联网更精彩, 所以做好审核很重要
Statement of this Website
The copyright of this blog article belongs to the blogger. Please specify the address when reprinting! If there is any infringement or violation of the law, please contact admin@php.cn Report processing!
All comments Speak rationally on civilized internet, please comply with News Comment Service Agreement
0 comments
Author's latest blog post