package org.llf.controller;
import org.apache.poi.util.IOUtils;
import org.llf.util.FileTools;
import org.llf.util.FileTypeUtils;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;
import org.springframework.web.bind.annotation.RequestMapping;
import org.springframework.web.bind.annotation.RequestParam;
import org.springframework.web.bind.annotation.RestController;
import org.springframework.web.multipart.MultipartFile;
import java.io.File;
import java.io.FileOutputStream;
import java.io.IOException;
@RestController
public class UploadFileController {
private static final Logger logger = LoggerFactory.getLogger(UploadFileController.class);
@RequestMapping("/upload")
public String uploadFile(@RequestParam("uploadFile") MultipartFile file) {
// 根据路径地址创建File对象
String targetFilePath = "E:\test\uploadTest";
File targetFile = new File(targetFilePath + File.separator + file.getOriginalFilename());
FileOutputStream fileOutputStream = null;
try {
// 通过文件后缀名获取文件类型,如果文件类型不在上传白名单种,提示错误
String fileType = FileTypeUtils.getFileTypeBySuffix(file.getOriginalFilename());
// 根据文件后缀和文件字节数组,判断是否为文件真实类型
boolean b = FileTools.getFileType("jpg", file.getBytes());
if (!b) {
return "文件真实类型校验不通过";
}
// 限制文件上传大小不能超过3M
if (file.getSize() > 1024 * 1024 * 3) {
return "文件大小不能超过3M";
}
// 根据File对象定义文件输出流
fileOutputStream = new FileOutputStream(targetFile);
// 把上传得文件流复制到自定义的文件输出流,完成文件的输出
IOUtils.copy(file.getInputStream(), fileOutputStream);
logger.info(" >>>>>> upload file successfully <<<<<<------");
} catch (IOException e) {
logger.info("文件输出到指定磁盘异常" + e);
return "system error";
} finally {
try {
// 最后关闭文件流
fileOutputStream.close();
} catch (IOException e) {
logger.error("", e);
}
}
return "上传成功";
}
}
package org.llf.util;
import java.util.HashMap;
import java.util.Locale;
import java.util.Map;
public class FileTypeUtils {
// 默认判断文件头前三个字节内容
public static int default_check_length = 3;
final static HashMap fileTypeMap = new HashMap<>();
// 初始化文件头类型,不够的自行补充
static {
fileTypeMap.put("ffd8ffe000104a464946", "jpg");
fileTypeMap.put("89504e470d0a1a0a0000", "png");
fileTypeMap.put("47494638396126026f01", "gif");
fileTypeMap.put("49492a00227105008037", "tif");
fileTypeMap.put("424d228c010000000000", "bmp");
fileTypeMap.put("424d8240090000000000", "bmp");
fileTypeMap.put("424d8e1b030000000000", "bmp");
fileTypeMap.put("41433130313500000000", "dwg");
fileTypeMap.put("3c21444f435459504520", "html");
fileTypeMap.put("3c21646f637479706520", "htm");
fileTypeMap.put("48544d4c207b0d0a0942", "css");
fileTypeMap.put("696b2e71623d696b2e71", "js");
fileTypeMap.put("7b5c727466315c616e73", "rtf");
fileTypeMap.put("38425053000100000000", "psd");
fileTypeMap.put("46726f6d3a203d3f6762", "eml");
fileTypeMap.put("d0cf11e0a1b11ae10000", "doc");
fileTypeMap.put("5374616E64617264204A", "mdb");
fileTypeMap.put("252150532D41646F6265", "ps");
fileTypeMap.put("255044462d312e350d0a", "pdf");
fileTypeMap.put("2e524d46000000120001", "rmvb");
fileTypeMap.put("464c5601050000000900", "flv");
fileTypeMap.put("00000020667479706d70", "mp4");
fileTypeMap.put("49443303000000002176", "mp3");
fileTypeMap.put("000001ba210001000180", "mpg");
fileTypeMap.put("3026b2758e66cf11a6d9", "wmv");
fileTypeMap.put("52494646e27807005741", "wav");
fileTypeMap.put("52494646d07d60074156", "avi");
fileTypeMap.put("4d546864000000060001", "mid");
fileTypeMap.put("504b0304140000000800", "zip");
fileTypeMap.put("526172211a0700cf9073", "rar");
fileTypeMap.put("235468697320636f6e66", "ini");
fileTypeMap.put("504b03040a0000000000", "jar");
fileTypeMap.put("4d5a9000030000000400", "exe");
fileTypeMap.put("3c25402070616765206c", "jsp");
fileTypeMap.put("4d616e69666573742d56", "mf");
fileTypeMap.put("3c3f786d6c2076657273", "xml");
fileTypeMap.put("494e5345525420494e54", "sql");
fileTypeMap.put("7061636b616765207765", "java");
fileTypeMap.put("406563686f206f66660d", "bat");
fileTypeMap.put("1f8b0800000000000000", "gz");
fileTypeMap.put("6c6f67346a2e726f6f74", "properties");
fileTypeMap.put("cafebabe0000002e0041", "class");
fileTypeMap.put("49545346030000006000", "chm");
fileTypeMap.put("04000000010000001300", "mxp");
fileTypeMap.put("504b0304140006000800", "docx");
fileTypeMap.put("6431303a637265617465", "torrent");
fileTypeMap.put("6D6F6F76", "mov");
fileTypeMap.put("FF575043", "wpd");
fileTypeMap.put("CFAD12FEC5FD746F", "dbx");
fileTypeMap.put("2142444E", "pst");
fileTypeMap.put("AC9EBD8F", "qdf");
fileTypeMap.put("E3828596", "pwl");
fileTypeMap.put("2E7261FD", "ram");
}
public static String getFileTypeBySuffix(String fileName) {
return fileName.substring(fileName.lastIndexOf(".") + 1, fileName.length());
}
public static String getFileTypeByMagicNumber(byte[] bytes) {
try {
// 获取文件头前三位魔数的二进制
// 文件头前三位魔数二进制转为16进制 504b0304140000000800
String code = bytesToHexString(bytes);
for (Map.Entry item : fileTypeMap.entrySet()) {
// 这里其实只要用前三位或者前
item.getKey().substring(0, 3);
if (code.toLowerCase(Locale.ENGLISH).startsWith(item.getKey().toLowerCase(Locale.ENGLISH)) ||
item.getKey().toLowerCase(Locale.ENGLISH).startsWith(code.toLowerCase(Locale.ENGLISH))) {
return item.getValue();
}
}
} catch (Exception e) {
e.printStackTrace();
}
return "";
}
public static String bytesToHexString(byte[] bytes) {
StringBuilder stringBuilder = new StringBuilder();
for (int i = 0; i < bytes.length; i++) {
int v = bytes[i] & 0xFF;
String hv = Integer.toHexString(v);
if (hv.length() < 2) {
stringBuilder.append(0);
}
stringBuilder.append(hv);
}
return stringBuilder.toString();
}
}