dongya2030 2017-03-19 13:03
浏览 1122

使用Laravel 5.4验证从远程Url下载的文件

In Laravel 5.4, when a form submission is made, the file(if any) in the request is passed to the Illuminate\Http\File or Illuminate\Http\UploadedFile instance. But let's say instead of the file, a url of that file is passed as the input. Naturally, the server will have to make a request to that input url to download the file. How will you validate the file in this scenario? (lets say I want to check if its an image or a video)

  • 写回答

1条回答 默认 最新

  • donglun4521 2017-03-19 18:18
    关注

    As example you can use custom Validator class.

    So basically we have controller which perform validation of form.

    <?php
    
    namespace App\Http\Controllers;
    
    use App\Article;
    use Illuminate\Http\Request;
    
    use App\Http\Requests;
    use App\Http\Controllers\Controller;
    
    use Validator;
    
    class ArticleController extends Controller
    {
        /**
         * Store a newly created resource in storage.
         *
         * @return Response
         */
        public function store($id = 0)
        {
            $rules = [
                'title'    => 'required',
                'body'     => 'required',
                'fileLink' => 'file_link',
            ];
    
            $validator = Validator::make(Input::all(), $rules);
    
            // process the login
            if ($validator->fails()) {
    
                return redirect()
                    ->route('article.create')
                    ->withErrors($validator);
    
            } else {
    
              //Other code
            }
        }
    
    }
    

    Then you have to create custom validator:

    <?php
    
    namespace App\Validators;
    
    class FileLinkValidator
    {
        public function validate($attribute, $value, $parameters, $validator)
        {
            $isValid = false;
    
            $ch = curl_init($value);
            curl_setopt($ch, CURLOPT_NOBODY, true);
            curl_exec($ch);
    
            $code = curl_getinfo($ch, CURLINFO_HTTP_CODE);
    
            if($code == 200){
                $allowedContentTypes = [
                    'image/jpeg'
                ];
    
                $contentType = curl_getinfo($ch, CURLINFO_CONTENT_TYPE);
    
                if(in_array($contentType,$allowedContentTypes)){
                    $isValid = true;
                }
            }
    
            curl_close($ch);
    
            return $isValid;
        }
    }
    

    Register validator:

    <?php
    
    namespace App\Providers;
    
    use Config;
    use Illuminate\Support\ServiceProvider;
    use Validator;
    
    class AppServiceProvider extends ServiceProvider
    {
        /**
         * Bootstrap any application services.
         *
         * @return void
         */
        public function boot()
        {
            Validator::extend('file_link', 'App\Validators\FileLinkValidator@validate','File Link should be valid url and contain file');
        }
    
        /**
         * Register any application services.
         *
         * @return void
         */
        public function register()
        {
           //
        }
    }
    

    Then you can download file in controller and save it on disk and all metadata to database. But you have to perform another level of validation, to be more secure for users.

    评论

报告相同问题?

悬赏问题

  • ¥15 vs2019中数据导出问题
  • ¥20 云服务Linux系统TCP-MSS值修改?
  • ¥20 关于#单片机#的问题:项目:使用模拟iic与ov2640通讯环境:F407问题:读取的ID号总是0xff,自己调了调发现在读从机数据时,SDA线上并未有信号变化(语言-c语言)
  • ¥20 怎么在stm32门禁成品上增加查询记录功能
  • ¥15 Source insight编写代码后使用CCS5.2版本import之后,代码跳到注释行里面
  • ¥50 NT4.0系统 STOP:0X0000007B
  • ¥15 想问一下stata17中这段代码哪里有问题呀
  • ¥15 flink cdc无法实时同步mysql数据
  • ¥100 有人会搭建GPT-J-6B框架吗?有偿
  • ¥15 求差集那个函数有问题,有无佬可以解决