jQuery File Upload - 带有特殊字符的 blueimp 文件名

Question

我的一些用户会附加名称包含特殊字符的文件，这些字符在下载和上传时对实用程序有问题，单引号，空格等。这似乎应该是一个简单的问题，但由于我在编码时是一个"绿色"，所以我可以使用一些帮助。

我尝试修改"上传处理程序.php"函数来操作文件名，但没有成功。我不确定我是否需要在表单或上传的输入级别解决它......

我的最后一次尝试是在 trim_file_name（） 函数中：

protected function trim_file_name($name,
        $type = null, $index = null, $content_range = null) {
    // Remove path information and dots around the filename, to prevent uploading
    // into different directories or replacing hidden system files.
    // Also remove control characters and spaces (x00..x20) around the filename:
    $name = trim(basename(stripslashes($name)), ".x00..x20");
    // Use a timestamp for empty filenames:
    if (!$name) {
        $name = str_replace('.', '-', microtime(true));
        $name = preg_replace('/[^A-Za-z0-9-]/', '', $name); <==== my attempt
    }
    // Add missing file extension for known image types:
    if (strpos($name, '.') === false &&
        preg_match('/^image/(gif|jpe?g|png)/', $type, $matches)) {
        $name .= '.'.$matches[1];
    }
    return $name;
}

我真的可以使用一些帮助。我真的很沮丧。

谢谢

Answer 1

我使用几个在生产中运行良好的函数来清理和清理文件名，我将把它们放在下面。

public static function cleanFileName($filename)
{
    $filename = htmlentities($filename, ENT_QUOTES, 'UTF-8');
    $filename = preg_replace('~&([a-z]{1,2})(acute|cedil|circ|grave|lig|orn|ring|slash|th|tilde|uml);~i', '$1', $filename);
    $filename = html_entity_decode($filename, ENT_QUOTES, 'UTF-8');
    $filename = preg_replace(array('~[^0-9a-z]~i', '~[ -]+~'), ' ', $filename);
    return trim($filename, ' -');
}
public static function sanitizeFileName($filename)
{
    $dangerous_characters = array(" ", '"', "'", "&", "/", "\", "?", "#");
    return str_replace($dangerous_characters, '_', $filename);
}

因此，一旦将这两个函数都复制到 UploadHandler 类，修改后的 trim_file_name 函数将如下所示：

protected function trim_file_name($name,
    $type = null, $index = null, $content_range = null) {
// Remove path information and dots around the filename, to prevent uploading
// into different directories or replacing hidden system files.
// Also remove control characters and spaces (x00..x20) around the filename:
$name = trim(basename(stripslashes($name)), ".x00..x20");
// Use a timestamp for empty filenames:
if (!$name) {
    $name = str_replace('.', '-', microtime(true));
}
// Add missing file extension for known image types:
if (strpos($name, '.') === false &&
    preg_match('/^image/(gif|jpe?g|png)/', $type, $matches)) {
    $name .= '.'.$matches[1];
}
// Call sanitize file name function
$name = UploadHandler::sanitizeFileName($name);
// Call clean file name function
$name = UploadHandler::cleanFileName($name);
return $name;
}

Answer 2

亚当："非常接近！文件名被正确修改，但似乎将文件扩展名添加为文件名的一部分，例如 My'File.jpg = My File jpg.jpg 有什么想法吗？

我

有同样的问题，我刚刚修复了该功能cleanFileName()...您应该在最后一个preg_replace函数中添加一个点"."：

这一行：

$filename = preg_replace(array('~[^0-9a-z]~i', '~[ -]+~'), ' ', $filename);

应该是：

$filename = preg_replace(array('~[^0-9.a-z]~i'),'',$filename);

因此，正则表达式不会删除点。

public static function cleanFileName($filename)
{
    $filename = htmlentities($filename, ENT_QUOTES, 'UTF-8');
    $filename = preg_replace('~&([a-z]{1,2})(acute|cedil|circ|grave|lig|orn|ring|slash|th|tilde|uml);~i', '$1', $filename);
    $filename = html_entity_decode($filename, ENT_QUOTES, 'UTF-8');
    $filename = preg_replace(array('~[^0-9.a-z]~i'),'',$filename);

    return trim($filename, ' -');
}