php - Laravel 5.1 中上传文件的安全性

Question

我不太擅长 Laravel 5.1。我需要你们的帮助...

为什么它会上传不在我的请求文件列表中的其他文件？我只想上传请求文件上的规则函数。

这是我的新更新 Controller

public function store(UploadFiles $filename) {

    $input = Input::all();
    $rules = array('filename' => 'mimes:pdf,doc,jpeg,png,docx');
    $validator = Validator::make($input, $rules);

    if($validator->fails()) {
        $messages = $validator->messages();
        print_r($messages);
    } else {
        $file = $filename->file('filefield');
        $extension = $file->getClientOriginalExtension();
        $entry = new Fileentry();
        $entry->mime = $file->getClientMimeType();
        $entry->original_filename = $file->getClientOriginalName();
        $entry->filename = $file->getFilename().'.'.$extension;
        $entry->description = Request::input('description');
        Storage::disk('local')->put($file->getFilename().'.'.$extension, File::get($file));
        $entry->user_id = Auth::user()->id;
        return redirect('upload');
    }    
}

我的请求:UploadFiles.php

public function authorize() {
    return true;
}

/**
 * Get the validation rules that apply to the request.
 *
 * @return array
 */
public function rules() {
    return ['filename' => 'mimes:pdf,doc,jpeg,png,docx'];
}

这是我的index.blade.php

<form action="{{route('addentry', [])}}" method="post" enctype="multipart/form-data">
    <input type="hidden" name="_token" value="{!! csrf_token() !!}">
    <input type="file" name="filefield" required>
    <br>

    Description <br>
    <div class="form-group">
       <input type="textarea" name="description"><br>
    </div>
    <input type="submit">
</form>

Answer 1

您应该将规则 arr 传递给验证器。

你的代码应该是这样的:

$input = Input::all();
$rules = array('filename' => 'mimes:pdf,doc,jpeg,png,docx');
$validator = Validator::make($input, $rules);

if ($validator->fails()) {
    $messages = $validator->messages();
    print_r($messages);
} else {
    //your upload code here
}