上传文件到服务器会保存带有无效字符的文件

时间:2014-08-21 01:18:26

标签: java php file-upload

我正在从我的java应用程序上传文件到php服务器,它上传一切都很好,但我注意到它是否有一个字符,如'在它然后在文件中它将是''不是'

例如,如果我在java中使用以下代码上传文件:

public static void main(String[] args)
{
    FILE tmpFile = new FILE(EncryptionUtil.EncryptAndZip("tes't file.txt").getAbsoluteFile().toString());

    postData
    (
        UPLOAD_URL + "?filename=" + URLEncoder.encode(file.getFileName() + ".zip", "utf-8"),
        tmpFile.getFileName() + ".zip",
        tmpFile.getFileLoader().readAllBytes() // FILE.getFileLoader().readAllBytes() is just a wrapper and reads all bytes from a file to byte[]
    );
}

private static final String CrLf = "\r\n";
public static void postData(String url, String filename, byte[] byteData) throws IOException
{
    URLConnection conn = null;
    InputStream is = null;
    OutputStream os = null;

    try
    {
        URL obj = new URL(url);
        System.out.println("url:" + obj);
        conn = obj.openConnection();
        conn.setDoOutput(true);

        String message1 = "";
        message1 += "-----------------------------4664151417711" + CrLf;
        message1 += "Content-Disposition: form-data; name=\"uploadedfile\"; filename=\"" + filename + "\""
                + CrLf;
        message1 += "Content-Type: application/octet-stream" + CrLf;
        message1 += CrLf;

        String message2 = "";
        message2 += CrLf + "-----------------------------4664151417711--"
                + CrLf;

        conn.setRequestProperty("Content-Type",
                "multipart/form-data; boundary=---------------------------4664151417711");

        conn.setRequestProperty("Content-Length", String.valueOf((message1
                .length() + message2.length() + byteData.length)));

        os = conn.getOutputStream();

        os.write(message1.getBytes());

        int index = 0;
        int size = 1024;
        do
        {
            if ((index + size) > byteData.length)
            {
                size = byteData.length - index;
            }
            os.write(byteData, index, size);
            index += size;
        }
        while (index < byteData.length);

        os.write(message2.getBytes());
        os.flush();

        is = conn.getInputStream();

        char buff = 512;
        int len;
        byte[] data = new byte[buff];
        do
        {
            len = is.read(data);

            if (len > 0)
            {
                System.out.println(new String(data, 0, len));
            }
        }
        while (len > 0);

    }
    catch (Exception e)
    {
        e.printStackTrace();
    }
    finally
    {
        try
        {
            os.close();
        }
        catch (Exception e)
        {
        }
        try
        {
            is.close();
        }
        catch (Exception e)
        {
        }
        try
        {
        }
        catch (Exception e)
        {
        }
    }
}

来自服务器的响应

url: http://127.0.0.1/cloudstore/upload.php?filename=tes%27t+.txt.zip
name of file user wants to save as: tes\'t file.txt.zip
actual save name: tes\'t file.txt.zip
Array
(
    [name] => tes't file.txt.zip
    [type] => application/octet-stream
    [tmp_name] => /tmp/phpgYl0QT
    [error] => 0
    [size] => 1274598
)

以下是我的php文件upload.php

<?php 

$target_path = "" . $_GET['filename'];
echo '  name of file user wants to save as: '.$target_path.'<br/>';
if (!file_exists(dirname($target_path))) {
    mkdir(dirname($target_path), 0777, true);
}

if(move_uploaded_file($_FILES['uploadedfile']['tmp_name'], $target_path)) { 
    echo "actual save name: ".basename( $_FILES['uploadedfile']['name'])." <br/>"; 
} else{ 
    echo "There was an error uploading the file, please try again!<br />"; 
}

print_r($_FILES['uploadedfile']);
?> 

导致此问题的原因我认为是php试图清理输入?我怎么能阻止这种情况发生?

2 个答案:

答案 0 :(得分:0)

如OP所希望的那样,关闭这个问题。

使用stripslashes()

有助于取消引用带引号的字符串,这是原因。

如果需要保存,tes\'t会更改为tes't,如果需要,也可以保存。{/ p>

来自manual

  

stripslashes()的一个示例是当PHP指令magic_quotes_gpc打开时(默认情况下在PHP 5.4之前打开),并且您没有将此数据插入到某个位置(例如数据库)这需要逃避。例如,如果您只是直接从HTML表单输出数据。

答案 1 :(得分:0)

如果打开,我通常会更喜欢关闭魔法引号。顺便说一下,它已经在较新的PHP版本中弃用了。