falst

README.md

@@ -1,3 +1,36 @@
-# Image_upload_serve
+# 加密解密上传图片、文件
 
-图片上传服务
+
+## 依赖
+1. php80+
+
+## 功能
+1. 支持大文件分片上传(PLUpload)
+2. web前端在线解密并渲染ceb（推荐）
+3. 上传的图片类加密,其他文件不加密.
+4. 提供服务器组
+5. 图片在线解密（不推荐）
+
+## 使用范例
+1. 【普通表单】加密和解密请查看 demo_form.html, 本地访问 [http://upload_php.3g.me/demo_form.html](http://upload_php.3g.me/demo_form.html)
+2. 【Plupload组件】本地访问 [http://upload_php.3g.me/demo_plupload.html](http://upload_php.3g.me/demo_plupload.html)
+
+## 部署
+1. 请查看deploy目录。把deploy/[xxx环境]/config/env.php和server.php拷贝到src/config目录里
+2. php.ini 设置post_max_size, upload_max_filesize, max_execution_time, upload_tmp_dir
+3. nginx.conf也需要设置 `fastcgi_` 相关
+```
+    fastcgi_connect_timeout 300;
+    fastcgi_send_timeout 300;
+    fastcgi_read_timeout 300;
+    fastcgi_buffer_size 64k;
+    fastcgi_buffers 4 64k;
+    fastcgi_busy_buffers_size 128k;
+    fastcgi_temp_file_write_size 128k;
+```
+4. composer install -vvv
+5.chmod -R 777 ./src/storage ./public
+
+## 常用修改
+1. `src/config/server.php` 修改服务器组，记得先获取当前服务器IP.
+2. 本地开发IP，已经适配127,192,172,10

composer.json

@@ -0,0 +1,7 @@
+{
+    "name": "jim/upload_php",
+    "type": "library",
+    "require": {
+        "aliyuncs/oss-sdk-php": "^2.4"
+    }
+}

composer.lock

@@ -0,0 +1,64 @@
+{
+    "_readme": [
+        "This file locks the dependencies of your project to a known state",
+        "Read more about it at https://getcomposer.org/doc/01-basic-usage.md#installing-dependencies",
+        "This file is @generated automatically"
+    ],
+    "content-hash": "860a30e7a87e4eaa2b3cb2e89a24c3a5",
+    "packages": [
+        {
+            "name": "aliyuncs/oss-sdk-php",
+            "version": "v2.4.3",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/aliyun/aliyun-oss-php-sdk.git",
+                "reference": "4ccead614915ee6685bf30016afb01aabd347e46"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/aliyun/aliyun-oss-php-sdk/zipball/4ccead614915ee6685bf30016afb01aabd347e46",
+                "reference": "4ccead614915ee6685bf30016afb01aabd347e46",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=5.3"
+            },
+            "require-dev": {
+                "phpunit/phpunit": "*",
+                "satooshi/php-coveralls": "*"
+            },
+            "type": "library",
+            "autoload": {
+                "psr-4": {
+                    "OSS\\": "src/OSS"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Aliyuncs",
+                    "homepage": "http://www.aliyun.com"
+                }
+            ],
+            "description": "Aliyun OSS SDK for PHP",
+            "homepage": "http://www.aliyun.com/product/oss/",
+            "support": {
+                "issues": "https://github.com/aliyun/aliyun-oss-php-sdk/issues",
+                "source": "https://github.com/aliyun/aliyun-oss-php-sdk/tree/v2.4.3"
+            },
+            "time": "2021-08-25T13:03:58+00:00"
+        }
+    ],
+    "packages-dev": [],
+    "aliases": [],
+    "minimum-stability": "stable",
+    "stability-flags": [],
+    "prefer-stable": false,
+    "prefer-lowest": false,
+    "platform": [],
+    "platform-dev": [],
+    "plugin-api-version": "2.1.0"
+}

deploy/dev/config/env.php

@@ -0,0 +1,18 @@
+<?php
+/**
+ * 配置环境.
+ */
+return [
+    'app_env' => 'local',
+    'server_ip' => '172.33.1.11',   // 因为容器里，php只能获取到容器的ip172.33.1.11，非容器需要手动改成服务器外网第一个IP.
+    'token' => 'GAkucH8',   // 通信的token
+    'app_secret' => 'SYtQo1ep4GvNCvac', // APP上传鉴权密钥,写死.
+    'aliyun_oss' => [
+        'bucketName' => 'test-chituma',
+        'bucketDomain' => '//test-chituma.oss-cn-hangzhou.aliyuncs.com',
+        'accessKeyId' => 'LTAI5tMjpFpKQd3UWAPDwW3F',
+        'accessKeySecret' => 'pbzVBCFx6jl9MDqFyfYrCDQGlBIq4a',
+        'endPoint' => 'oss-cn-hangzhou.aliyuncs.com',
+    ],
+    'video_base_path' => '/Users/jim/works/company/sanguo/projectes/upload_php/public/files/local',  // ppvod上传目录路径
+];

deploy/dev/config/servers.php

@@ -0,0 +1,49 @@
+<?php
+/**
+ * 服务器组，访问资源设置. 每个url尾部不包含/
+ */
+
+return [
+    '127.0.0.1' => [
+        'flag' => 'local',
+        'url' => 'http://upload_view.3g.me',
+        'source_ip' => '127.0.0.1', // 源站IP
+        'source_port' => '8001', // 源站端口
+        'source_base_path' => '/home/works/upload_php/public/files',  // 源站物理根目录路径.
+    ],
+    '45.204.8.106' => [
+        'flag' => 'test01',
+        'url' => 'http://upload_view.test.wg8.site',
+        'source_ip' => '45.204.8.106', // 源站IP
+        'source_port' => '8001', // 源站端口
+        'source_base_path' => '/var/www/upload_php/public',  // 源站物理根目录路径.
+    ],
+    '45.32.101.29' => [
+        'flag' => 'test_ppvod',
+        'url' => 'http://upload-ppvod.test.wg8.site',
+        'source_ip' => '45.32.101.29', // 源站IP
+        'source_port' => '8001', // 源站端口
+        'source_base_path' => '/home/works/uploads',  // 源站物理根目录路径.
+    ],
+    '137.220.244.208' => [
+        'flag' => 'v1',
+        'url' => 'http://cn01.v.zzhxjdwx.com',
+        'source_ip' => '137.220.244.208', // 源站IP
+        'source_port' => '8001', // 源站端口
+        'source_base_path' => '/home/work/data',  // 源站物理根目录路径.
+    ],
+    '137.220.244.183' => [
+        'flag' => 'f1',
+        'url' => 'http://cn01.f.meirenchong.net',
+        'source_ip' => '137.220.244.183', // 源站IP
+        'source_port' => '8001', // 源站端口
+        'source_base_path' => '/home/works/upload_php/public/files',  // 源站物理根目录路径.
+    ],
+    '137.220.244.113' => [
+        'flag' => 'f2',
+        'url' => 'http://cn02.f.meirenchong.net',
+        'source_ip' => '137.220.244.183', // 源站IP
+        'source_port' => '8002', // 源站端口
+        'source_base_path' => '/home/works/upload_php/public/app_static',  // 源站物理根目录路径.
+    ],
+];

deploy/ignore/.gitignore

@@ -0,0 +1,2 @@
+*
+!.gitignore

deploy/nginx/conf.d/upload_php.conf

@@ -0,0 +1,91 @@
+server {
+    listen 80;
+    client_max_body_size 100M;
+
+    # 如果要开启443，请先生成你的服务器证书，若双向认证，请导入证书到你的电脑里
+   # listen 443 ssl;
+   # ssl_certificate      /etc/nginx/ca/ssl/certs/server.cer;
+   # ssl_certificate_key  /etc/nginx/ca/ssl/private/server.key;
+   # ssl_client_certificate /etc/nginx/ca/ssl/certs/ca.cer;
+   # ssl_verify_client off;
+   # ssl_prefer_server_ciphers on;
+   # ssl_protocols       TLSv1 TLSv1.1 TLSv1.2;
+   # ssl_ciphers         HIGH:!aNULL:!MD5;
+
+    #多个域名用空格分割，第一个为默认
+    server_name upload_php.3g.me;
+
+    charset UTF-8;
+    index default.html default.htm default.php index.html index.htm index.php;
+
+    # 定义根目录
+    set $root /var/www/upload_php/src;
+
+    # 设置站点路径
+    root  $root;
+
+    # 防止目录浏览
+    autoindex off;
+
+    #sendfile        off;
+
+    # 跨域
+    set $cors_credentials '';
+    set $cors_content_type '';
+    set $cors_content_length '';
+    if ($http_origin ~ '.+') {
+        set $cors_credentials 'true';
+    }
+    if ($request_method = OPTIONS) {
+        set $cors_content_type 'text/plain';
+        set $cors_content_length '0';
+    }
+    add_header Access-Control-Allow-Origin $http_origin always;
+    add_header Access-Control-Allow-Credentials $cors_credentials always;
+    add_header Access-Control-Allow-Methods $http_access_control_request_method always;
+    add_header Access-Control-Allow-Headers $http_access_control_request_headers always;
+    add_header Content-Type $cors_content_type;
+    add_header Content-Length $cors_content_length;
+    if ($request_method = OPTIONS) {
+        return 204;
+    }
+
+    # 防止.htaccess文件被请求
+    location ~ /\.ht {
+        deny all;
+    }
+    location / {
+        try_files $uri $uri/ /index.php?$query_string;
+    }
+
+    #error_page  404              /err/404.htm;
+
+    # 将php类型的请求转交给fastcgi
+    location ~ \.php$ {
+        fastcgi_pass   php80:9000;
+        try_files  $uri =404;
+        fastcgi_split_path_info ^(.+\.php)(.*)$;
+        fastcgi_index  index.php;
+        fastcgi_param SCRIPT_FILENAME  $document_root$fastcgi_script_name;
+        fastcgi_param  PHP_VALUE  "open_basedir=/var/www/:/tmp/:/var/log/";
+        include fastcgi_params;
+        #include fastcgi.conf;
+    }
+
+    #缓存图片周期30天
+    location ~* \.(jpg|jpeg|gif|png)$ {
+        access_log  off;
+        expires  30d;
+    }
+    #缓存js和css7天
+    location ~* \.(js|css)$ {
+       access_log  off;
+       expires  7d;
+    }
+
+    # 访问日志：
+    access_log  /var/log/nginx/upload_php.access.log;
+    error_log  /var/log/nginx/upload_php.error.log;
+}
+
+

deploy/nginx/conf.d/upload_view.conf

@@ -0,0 +1,76 @@
+server {
+    listen 80;
+    client_max_body_size 20M;
+
+    # 如果要开启443，请先生成你的服务器证书，若双向认证，请导入证书到你的电脑里
+   # listen 443 ssl;
+   # ssl_certificate      /etc/nginx/ca/ssl/certs/server.cer;
+   # ssl_certificate_key  /etc/nginx/ca/ssl/private/server.key;
+   # ssl_client_certificate /etc/nginx/ca/ssl/certs/ca.cer;
+   # ssl_verify_client off;
+   # ssl_prefer_server_ciphers on;
+   # ssl_protocols       TLSv1 TLSv1.1 TLSv1.2;
+   # ssl_ciphers         HIGH:!aNULL:!MD5;
+
+    #多个域名用空格分割，第一个为默认
+    server_name upload_view.3g.me;
+
+    charset UTF-8;
+    index default.html default.htm index.html index.htm;
+
+    # 定义根目录
+    set $root /var/www/upload_php/public/files;
+
+    # 设置站点路径
+    root  $root;
+
+    # 防止目录浏览
+    autoindex off;
+    
+    # 跨域
+    set $cors_credentials '';
+    set $cors_content_type '';
+    set $cors_content_length '';
+    if ($http_origin ~ '.+') {
+        set $cors_credentials 'true';
+    }
+    if ($request_method = OPTIONS) {
+        set $cors_content_type 'text/plain';
+        set $cors_content_length '0';
+    }
+    add_header Access-Control-Allow-Origin $http_origin always;
+    add_header Access-Control-Allow-Credentials $cors_credentials always;
+    add_header Access-Control-Allow-Methods $http_access_control_request_method always;
+    add_header Access-Control-Allow-Headers $http_access_control_request_headers always;
+    add_header Content-Type $cors_content_type;
+    add_header Content-Length $cors_content_length;
+    if ($request_method = OPTIONS) {
+        return 204;
+    }
+
+    # 防止.htaccess,php文件被请求
+    location ~* \.(ht|php|php5)$ {
+        access_log  off;
+        deny all;
+    }
+
+    #error_page  404              /err/404.htm;
+
+
+    #缓存图片周期30天
+    location ~* \.(jpg|jpeg|gif|png|ceb|webp|apk|ipa)$ {
+        access_log  off;
+        expires  max;
+    }
+    #缓存js和css7天
+    location ~* \.(js|css)$ {
+       access_log  off;
+       expires  7d;
+    }
+
+    # 访问日志：
+    access_log  /var/log/nginx/upload_view.access.log;
+    error_log  /var/log/nginx/upload_view.error.log;
+}
+
+

deploy/prod/config/env.php

@@ -0,0 +1,18 @@
+<?php
+/**
+ * 配置环境.
+ */
+return [
+    'app_env' => 'prod',
+    'server_ip' => '137.220.244.183',   // 因为容器里，php只能获取到容器的ip172.33.1.11，非容器需要手动改成服务器外网第一个IP.
+    'token' => 'GAkucH8',   // 通信的token
+    'app_secret' => 'SYtQo1ep4GvNCvac', // APP上传鉴权密钥,写死.
+    'aliyun_oss' => [
+        'bucketName' => 'hz-ag-1',
+        'bucketDomain' => '//hz-ag-1.oss-cn-hangzhou.aliyuncs.com',
+        'accessKeyId' => 'LTAI5tRcMVmAFfWUymw44ygY',
+        'accessKeySecret' => 'qcgQiUbUzg907JMQ6nD5EojMKvpdHM',
+        'endPoint' => 'oss-cn-hangzhou.aliyuncs.com',
+    ],
+    'video_base_path' => '/home/work/uploads',  // ppvod上传目录路径
+];

deploy/prod/config/servers.php

@@ -0,0 +1,49 @@
+<?php
+/**
+ * 服务器组，访问资源设置. 每个url尾部不包含/
+ */
+
+return [
+    '127.0.0.1' => [
+        'flag' => 'local',
+        'url' => 'http://upload_view.3g.me',
+        'source_ip' => '127.0.0.1', // 源站IP
+        'source_port' => '8001', // 源站端口
+        'source_base_path' => '/home/works/upload_php/public/files',  // 源站物理根目录路径.
+    ],
+    '45.204.8.106' => [
+        'flag' => 'test01',
+        'url' => 'http://upload_view.test.wg8.site',
+        'source_ip' => '45.204.8.106', // 源站IP
+        'source_port' => '8001', // 源站端口
+        'source_base_path' => '/var/www/upload_php/public',  // 源站物理根目录路径.
+    ],
+    '45.32.101.29' => [
+        'flag' => 'test_ppvod',
+        'url' => 'http://upload-ppvod.test.wg8.site',
+        'source_ip' => '45.32.101.29', // 源站IP
+        'source_port' => '8001', // 源站端口
+        'source_base_path' => '/home/works/uploads',  // 源站物理根目录路径.
+    ],
+    '137.220.244.208' => [
+        'flag' => 'v1',
+        'url' => 'http://cn01.v.zzhxjdwx.com',
+        'source_ip' => '137.220.244.208', // 源站IP
+        'source_port' => '8001', // 源站端口
+        'source_base_path' => '/home/work/data',  // 源站物理根目录路径.
+    ],
+    '137.220.244.183' => [
+        'flag' => 'f1',
+        'url' => 'http://cn01.f.meirenchong.net',
+        'source_ip' => '137.220.244.183', // 源站IP
+        'source_port' => '8001', // 源站端口
+        'source_base_path' => '/home/works/upload_php/public/files',  // 源站物理根目录路径.
+    ],
+    '137.220.244.113' => [
+        'flag' => 'f2',
+        'url' => 'http://cn02.f.meirenchong.net',
+        'source_ip' => '137.220.244.183', // 源站IP
+        'source_port' => '8002', // 源站端口
+        'source_base_path' => '/home/works/upload_php/public/app_static',  // 源站物理根目录路径.
+    ],
+];

deploy/shell/deploy_upload_php.sh

@@ -0,0 +1,12 @@
+#!/bin/bash
+
+cd /home/works/upload_php
+
+git reset --hard
+git pull
+
+#composer install
+
+chmod -R 777 ./src/storage ./public
+
+echo "上传加密部署完成，请检查env.php/servers.php配置"

deploy/test/config/env.php

@@ -0,0 +1,17 @@
+<?php
+/**
+ * 配置环境.
+ */
+return [
+    'app_env' => 'test',
+    'server_ip' => '45.204.8.106',   // 因为容器里，php只能获取到容器的ip172.33.1.11，非容器需要手动改成服务器外网第一个IP.
+    'token' => 'GAkucH8',   // 通信的token
+    'aliyun_oss' => [
+        'bucketName' => 'test-chituma',
+        'bucketDomain' => '//test-chituma.oss-cn-hangzhou.aliyuncs.com',
+        'accessKeyId' => 'LTAI5tMjpFpKQd3UWAPDwW3F',
+        'accessKeySecret' => 'pbzVBCFx6jl9MDqFyfYrCDQGlBIq4a',
+        'endPoint' => 'oss-cn-hangzhou.aliyuncs.com',
+    ],
+    'video_base_path' => '/home/work/uploads',  // ppvod上传目录路径
+];

deploy/test/config/ppvod.env.php

@@ -0,0 +1,17 @@
+<?php
+/**
+ * 配置环境.
+ */
+return [
+    'app_env' => 'test_ppvod',
+    'server_ip' => '45.32.101.29',   // 因为容器里，php只能获取到容器的ip172.33.1.11，非容器需要手动改成服务器外网第一个IP.
+    'token' => 'GAkucH8',   // 通信的token
+    'aliyun_oss' => [
+        'bucketName' => 'test-chituma',
+        'bucketDomain' => '//test-chituma.oss-cn-hangzhou.aliyuncs.com',
+        'accessKeyId' => 'LTAI5tMjpFpKQd3UWAPDwW3F',
+        'accessKeySecret' => 'pbzVBCFx6jl9MDqFyfYrCDQGlBIq4a',
+        'endPoint' => 'oss-cn-hangzhou.aliyuncs.com',
+    ],
+    'video_base_path' => '/home/work/uploads',  // ppvod上传目录路径
+];

deploy/test/config/servers.php

@@ -0,0 +1,49 @@
+<?php
+/**
+ * 服务器组，访问资源设置. 每个url尾部不包含/
+ */
+
+return [
+    '127.0.0.1' => [
+        'flag' => 'local',
+        'url' => 'http://upload_view.3g.me',
+        'source_ip' => '127.0.0.1', // 源站IP
+        'source_port' => '8001', // 源站端口
+        'source_base_path' => '/home/works/upload_php/public/files',  // 源站物理根目录路径.
+    ],
+    '45.204.8.106' => [
+        'flag' => 'test01',
+        'url' => 'http://upload_view.test.wg8.site',
+        'source_ip' => '45.204.8.106', // 源站IP
+        'source_port' => '8001', // 源站端口
+        'source_base_path' => '/var/www/upload_php/public',  // 源站物理根目录路径.
+    ],
+    '45.32.101.29' => [
+        'flag' => 'test_ppvod',
+        'url' => 'http://upload-ppvod.test.wg8.site',
+        'source_ip' => '45.32.101.29', // 源站IP
+        'source_port' => '8001', // 源站端口
+        'source_base_path' => '/home/works/uploads',  // 源站物理根目录路径.
+    ],
+    '137.220.244.208' => [
+        'flag' => 'v1',
+        'url' => 'http://cn01.v.zzhxjdwx.com',
+        'source_ip' => '137.220.244.208', // 源站IP
+        'source_port' => '8001', // 源站端口
+        'source_base_path' => '/home/work/data',  // 源站物理根目录路径.
+    ],
+    '137.220.244.183' => [
+        'flag' => 'f1',
+        'url' => 'http://cn01.f.meirenchong.net',
+        'source_ip' => '137.220.244.183', // 源站IP
+        'source_port' => '8001', // 源站端口
+        'source_base_path' => '/home/works/upload_php/public/files',  // 源站物理根目录路径.
+    ],
+    '137.220.244.113' => [
+        'flag' => 'f2',
+        'url' => 'http://cn02.f.meirenchong.net',
+        'source_ip' => '137.220.244.183', // 源站IP
+        'source_port' => '8002', // 源站端口
+        'source_base_path' => '/home/works/upload_php/public/app_static',  // 源站物理根目录路径.
+    ],
+];