通达OA文件附件处理机制详解

upload($field_name, $allow_types = "", $max_size = 0, $module = "", $uid = 0)

include_once("inc/utility_file.php");

// 处理文件上传
if ($_FILES['attachment']['name']) {
    $result = upload('attachment', '', 20480, 'project');
    
    if ($result['error'] == 0) {
        $attach_id = $result['id'];
        // 保存附件ID到业务表
        $td->query("UPDATE project SET attach_id = '$attach_id' WHERE project_id = 1");
    } else {
        Message(_("上传失败：") . $result['error'], "", "error");
    }
}

<form method="post" action="upload.php" enctype="multipart/form-data">
    <input type="file" name="attachment" multiple>
    <button type="submit"><?php echo _("上传"); ?></button>
</form>

add_attach($module, $record_id, $attach_ids, $uid = 0)

add_attach('project', 1, '123,456,789');

add_attach_module($module_name, $module_title)

add_attach_module('project', _("项目管理"));

delete_attach($attach_id)

delete_attach('123456');

delete_attach_old($attach_id)

attach_size($attach_id)

$size = attach_size('123456');
echo "文件大小：" . format_size($size);

attach_real_path($attach_id)

$path = attach_real_path('123456');
echo "文件路径：$path";

attach_url($attach_id, $inline = false)

// 获取下载链接
$download_url = attach_url('123456');

// 获取预览链接
$preview_url = attach_url('123456', true);

attach_link($attach_id, $text = "", $inline = false)

echo attach_link('123456', _("点击下载"));

copy_attach($attach_id, $new_module = "", $new_record_id = 0)

$new_attach_id = copy_attach('123456', 'project', 2);

attach_sign_key($attach_id)

$sign = attach_sign_key('123456');
$url = "download.php?id=123456&sign=$sign";

// 编码
$encoded_id = attach_id_encode($raw_id);

// 解码
$raw_id = attach_id_decode($encoded_id);

is_uploadable($filename)

is_text($filename)

is_office($filename)

is_image($filename)

is_viewable($filename)

is_media($filename)

is_editable($filename)

is_wps($filename)

CreateThumb($src_file, $dst_file, $max_width, $max_height)

CreateThumb(
    "attach/project/202401/image.jpg",
    "attach/project/202401/image_thumb.jpg",
    200,
    200
);

image_mimetype($filename)

$mime = image_mimetype("image.jpg");
echo "MIME类型：$mime"; // 输出：image/jpeg

ReplaceImageSrc($html, $module, $record_id)

$content = '<img src="image.jpg">';
$content = ReplaceImageSrc($content, 'project', 1);
// 输出：<img src="/attach/project/202401/image.jpg">

dir_size($dir)

$size = dir_size("attach/project");
echo "目录大小：" . format_size($size);

delete_dir($dir)

dir_file_nums($dir)

backup_file($src_file, $dst_file)

td_copy($src_file, $dst_file)

td_rename($old_name, $new_name)

td_file_put_contents($file, $content)

<?php
include_once("inc/auth.inc.php");
include_once("inc/header.inc.php");
include_once("inc/utility_file.php");

if ($_POST) {
    $attach_ids = array();
    
    // 处理文件上传
    if ($_FILES['attachments']['name'][0]) {
        foreach ($_FILES['attachments']['name'] as $key => $name) {
            // 临时修改$_FILES结构
            $temp_file = array(
                'name' => $_FILES['attachments']['name'][$key],
                'type' => $_FILES['attachments']['type'][$key],
                'tmp_name' => $_FILES['attachments']['tmp_name'][$key],
                'error' => $_FILES['attachments']['error'][$key],
                'size' => $_FILES['attachments']['size'][$key]
            );
            
            $_FILES['attachment'] = $temp_file;
            
            $result = upload('attachment', '', 20480, 'project');
            
            if ($result['error'] == 0) {
                $attach_ids[] = $result['id'];
            }
        }
    }
    
    // 保存到数据库
    if (!empty($attach_ids)) {
        $attach_id_str = implode(',', $attach_ids);
        $td->query("INSERT INTO project_attach (project_id, attach_ids) VALUES (1, '$attach_id_str')");
    }
    
    Message(_("上传成功"), "index.php", "success");
    exit;
}
?>

<form method="post" enctype="multipart/form-data">
    <input type="file" name="attachments" multiple>
    <button type="submit"><?php echo _("上传附件"); ?></button>
</form>

<?php
include_once("inc/footer.inc.php");
?>

<?php
include_once("inc/auth.inc.php");
include_once("inc/header.inc.php");
include_once("inc/utility_file.php");

// 获取附件列表
$result = $td->query("SELECT attach_ids FROM project WHERE project_id = 1");
$row = $td->fetch_array($result);
$attach_ids = explode(',', $row['attach_ids']);
?>

<div class="attach-list">
    <h3><?php echo _("附件列表"); ?></h3>
    <?php foreach ($attach_ids as $attach_id) { ?>
        <div class="attach-item">
            <?php echo attach_link($attach_id); ?>
            <span class="size">(<?php echo format_size(attach_size($attach_id)); ?>)</span>
            <a href="delete_attach.php?id=<?php echo $attach_id; ?>" 
               onclick="return confirm('<?php echo _('确定删除?'); ?>')">
                <?php echo _("删除"); ?>
            </a>
        </div>
    <?php } ?>
</div>

<?php
include_once("inc/footer.inc.php");
?>

<?php
include_once("inc/auth.inc.php");

// 检查附件权限
function check_attach_permission($attach_id, $uid) {
    global $td;
    
    // 查询附件所属记录
    $sql = "SELECT * FROM project_attach WHERE attach_ids LIKE '%$attach_id%'";
    $result = $td->query($sql);
    
    if ($td->num_rows($result) > 0) {
        $row = $td->fetch_array($result);
        
        // 检查项目权限
        $project_result = $td->query("SELECT creator_uid FROM project WHERE project_id = " . $row['project_id']);
        $project_row = $td->fetch_array($project_result);
        
        if ($project_row['creator_uid'] == $uid || is_module_manager($uid, 'project')) {
            return true;
        }
    }
    
    return false;
}

// 使用示例
$attach_id = $_GET['id'];
if (!check_attach_permission($attach_id, $_SESSION['uid'])) {
    Message(_("无权限访问该附件"), "", "error");
    exit;
}

// 允许访问附件
$path = attach_real_path($attach_id);
// 输出文件内容
?>