php - Apache2 access.log 对于相同的数据包不同

Question

我有一个 C++ 程序试图使用在 Apache2 网络服务器上运行的 PHP 应用程序上传文件。我有一个非常奇怪的问题，我不知道该怎么做。因此，我使用 httpSendRequest() 函数创建了 HTTP 请求，在 wireshark 中查看时它的格式似乎正确.然而，文件没有上传，当我查看 apache 的 access.log 文件时，它没有显示用户代理或内容长度，尽管两者都明显存在于数据包捕获中。

作为引用，返回 200 状态的请求与使用 burp 套件发送的数据包相同，而不是我使用 httpSendRequest 的程序发送的数据包，而且我也能够使用网络浏览器成功上传文件。

这是使用 httpSendRequest 创建请求的代码，其中大部分直接取自 this codeguru post .

#include <windows.h>
#include <wininet.h>
#include <iostream>


#define ERROR_OPEN_FILE       10
#define ERROR_MEMORY          11
#define ERROR_SIZE            12
#define ERROR_INTERNET_OPEN   13
#define ERROR_INTERNET_CONN   14
#define ERROR_INTERNET_REQ    15
#define ERROR_INTERNET_SEND   16

using namespace std;

int main()
{
   // Local variables
   static char *filename   = "test.txt";   //Filename to be loaded
   static char *type       = "image/jpg";
   static char boundary[]  = "PaulRules";            //Header boundary
   static char nameForm[]  = "fileToUpload";     //Input form name
   static char iaddr[]     = "192.168.0.105";        //IP address
   static char url[]       = "upload.php";         //URL

   char hdrs[255];                  //Headers
   char * buffer;                   //Buffer containing file + headers
   char * content;                  //Buffer containing file
   FILE * pFile;                    //File pointer
   long lSize;                      //File size
   size_t result;


   // Open file
   pFile = fopen ( filename , "rb" );
   if (pFile==NULL) return ERROR_OPEN_FILE;

   // obtain file size:
   fseek (pFile , 0 , SEEK_END);
   lSize = ftell (pFile);
   rewind (pFile);

   // allocate memory to contain the whole file:
   content = (char*) malloc (sizeof(char)*lSize);
   if (content == NULL) return ERROR_MEMORY;

   // copy the file into the buffer:
   result = fread (content,1,lSize,pFile);
   if (result != lSize) return ERROR_SIZE;

   // terminate
   fclose (pFile);

   //allocate memory to contain the whole file + HEADER
   buffer = (char*) malloc (sizeof(char)*lSize + 2048);

   //print header
   sprintf(hdrs,"Content-Type: multipart/form-data; boundary=%s",boundary);
   sprintf(buffer,"--%s\r\nContent-Disposition: form-data; name=\"fileToUpload\"; filename=\"test.bmp\"\r\n",boundary,nameForm,filename);
   sprintf(buffer,"%sContent-Type: %s\r\n\r\n",buffer,type);

   int cb = strlen(buffer);
   char * bp = buffer + cb;
   memcpy(bp, content, lSize);
   bp += lSize;
   int cw = sprintf(bp,"\r\n--%s--\r\n",boundary);

   //Open internet connection
   HINTERNET hSession = InternetOpen("Paul was here :)",INTERNET_OPEN_TYPE_PRECONFIG, NULL, NULL, 0);
   if(hSession==NULL) return ERROR_INTERNET_OPEN;

   HINTERNET hConnect = InternetConnect(hSession, iaddr,INTERNET_DEFAULT_HTTP_PORT, NULL, NULL, INTERNET_SERVICE_HTTP, 0, 1);
   if(hConnect==NULL) return ERROR_INTERNET_CONN;

   HINTERNET hRequest = HttpOpenRequest(hConnect, (const char*)"POST",url, NULL, NULL, (const char**)"*/*", 0, 1);
   if(hRequest==NULL) return ERROR_INTERNET_REQ;

   BOOL sent= HttpSendRequest(hRequest, hdrs, strlen(hdrs), buffer, cb + lSize + cw);
   if(!sent) return ERROR_INTERNET_SEND;

   //close any valid internet-handles
   InternetCloseHandle(hSession);
   InternetCloseHandle(hConnect);
   InternetCloseHandle(hRequest);

   return 0;
}

这是服务器端的 PHP 脚本

<?php
$target_dir = "recvFile/";
$target_file = $target_dir . basename($_FILES["fileToUpload"]["name"]);
$uploadOk = 1;
$imageFileType = pathinfo($target_file,PATHINFO_EXTENSION);

// Check if file already exists
if (file_exists($target_file)) {
    echo "File already exists";
    $uploadOk = 0;
}

// Check file size
if ($_FILES["fileToUpload"]["size"] > 500000) {
    echo "File to large";
    $uploadOk = 0;
}

// Check if $uploadOk is set to 0 by an error
if ($uploadOk == 0) {
    echo "ERROR File not uploaded";
}

//attempt to upload the file
else {
    if (move_uploaded_file($_FILES["fileToUpload"]["tmp_name"], $target_file)) {
        //echo "The file ". basename( $_FILES["fileToUpload"]["name"]). " has been uploaded.";
        echo "Command:1";
    }
    else {
        echo $_FILES["fileToUpload"]["tmp_name"];
        echo "ERROR uploading file";
    }
}
?>

Answer 1

您的源文件是 "test.txt" 但您正在上传到 "test.bmp"。使它们具有相同的扩展名。

type = "image/jpg";

将 type 更改为 "image/*" 或 "text/*" 如果这应该是文本。

看到它打印出 "Command 1"，您的操作可能是成功的。该文件可能在那里，但它不是您期望的那个。如果没有，请查看您可以从 PHP 端提取什么错误。

sprintf(buffer,"--%s\r\nContent-Disposition: form-data; \
name=\"fileToUpload\"; filename=\"test.bmp\"\r\n",
boundary,nameForm,filename);

您有一个格式说明符 "%s" 和 4 个参数。删除最后两个参数。

使用HttpOpenRequest推荐方式:

const char *accept[] = { "image/*", NULL }; // or `"text/*"`
HttpOpenRequest(hConnect, "POST",url, NULL, NULL, accept, 0, 1);

---

使用 C++ 的代码

#include <Windows.h>
#include <Wininet.h>
#include <iostream>
#include <fstream>
#include <sstream>
#include <string>

#pragma comment(lib, "wininet.lib")

int main()
{
    HINTERNET hsession = NULL;
    HINTERNET hconnect = NULL;
    HINTERNET hrequest = NULL;

    const char* server = "localhost";
    const char* url = "upload.php";
    const char* type = "image/*";
    std::string filename = "test.bmp";

    std::ifstream infile("c:\\test\\test.bmp", std::ios::binary);
    if(!infile) 
        return 0;

    std::ostringstream oss;
    oss << infile.rdbuf();

    std::string headers = "Content-type: multipart/form-data, boundary=uniquestring";

    std::string data = "--uniquestring\r\n\
Content-Disposition: form-data; name=\"fileToUpload\"; filename=\"%1\"\r\n\
Content-Type: %2\r\n\
\r\n\
%3\r\n\
--uniquestring--";

    data.replace(data.find("%1"), 2, filename);
    data.replace(data.find("%2"), 2, type);
    data.replace(data.find("%3"), 2, oss.str());

    hsession = InternetOpen("appname", INTERNET_OPEN_TYPE_PRECONFIG, NULL, NULL, 0);
    if(!hsession) 
        goto cleanup;

    hconnect = InternetConnect(hsession, server, INTERNET_DEFAULT_HTTP_PORT,
        NULL, NULL, INTERNET_SERVICE_HTTP, 0, 1);
    if(!hconnect)
        goto cleanup;

    const char *accept[] = { type, NULL };
    hrequest = HttpOpenRequest(hconnect, "POST", url, NULL, NULL, accept, 0, 1);
    if(!hrequest)
        goto cleanup;

    BOOL sent = HttpSendRequest(hrequest, headers.data(), headers.size(), 
        &data[0], data.size());
    if(sent)
    {
        DWORD bufsize = 4096;
        std::string read(bufsize, 0);
        InternetReadFile(hrequest, &read[0], bufsize, &bufsize);
        read.resize(bufsize);
        std::cout << read << "\n";
    }
    else
    {
        goto cleanup;
    }

cleanup:
    if(hrequest) InternetCloseHandle(hrequest);
    if(hconnect) InternetCloseHandle(hconnect);
    if(hsession) InternetCloseHandle(hsession);
    return 0;
}