php图片上传报非法错误,帮忙看一下什么问题thinkphp上传类报非法操作

该楼层疑似违规已被系统折叠 隐藏此楼查看此楼

public function

goods_add(){

$db = M("goods");

$cont = M("content");

$picture = M("picture");

$path = "./Uploads/Goods";

$allowtype =array("gif","png","jpg");

$size = 1000000;

if(isset($_POST['dosubmit'])){

//p($_FILES['file_upload']);exit;

if (!isset($_FILES['myfile'])) {

$this->error("没有上传图片");

} else {

$hz =array_pop(explode(".", $_FILES['myfile']['name']));

$filename = date("Y-m-dH-i-s") . rand(100, 999) . "." . $hz;

$picture = $path . '/' .$filename;

if(!in_array($hz,$allowtype)){

$this->error("不是容许的类型");

}

if($_FILES['myfile']['size']>$size){

$this->error("超过了容许的值");

}

thumb($_FILES['myfile']['tmp_name'], 70,30);

if(is_uploaded_file($_FILES['myfile']['tmp_name'])) {

if (!move_uploaded_file($_FILES['myfile']['tmp_name'],

$path . '/' . $filename)) {

$thi>error('不能将文件移到指定的目录');

}

}

}

$data = array();

$content = array();

$data['name'] = $_POST['name'];

$data['number'] = $_POST['number'];

$data['unit'] = $_POST['unit'];

$data['price'] = $_POST['price'];

$data['price_user'] =$_POST['price_user'];

$data['price_vip'] =$_POST['price_vip'];

$data['reviews'] =(int)$_POST['reviews'];

$data['click'] =(int)$_POST['click'];

$data['ordernum'] =(int)$_POST['ordernum'];

$data['time'] = time();

$data['show'] = $picture;

$data['hot'] = (int)$_POST['hot'];

$data['promotion']=(int)$_POST['promotion'];

$data['cid'] = (int)$_POST['cid'];

$data['aid'] =(int)session(admin_id);

$data['bid'] = (int)$_POST['bid'];

$content['intro'] =trim(htmlfilter($_POST['intro']));

$content['service'] =trim(htmlfilter($_POST['service']));

//p($content);exit();

if($_FILES['fileupload']['error']!=4){

$upload = $this->uploadImg();

if(!$upload['status']){

$this->error($upload['msg']);

}

}

if($gid=$db->data($data)->add()){

if(isset($upload)&&isset($content)){

$result = $upload['msg'];

$result['gid'] = $gid;

$content['gid'] = $gid;

$picture->data($result)->add();

$cont->data($content)->add();

$this->success("添加成功","Index/index");exit();

//echo 3333;exit();

}

}

}

}

Public function uploadImg(){

import('ORG.Net.UploadFile');

$upload = new UploadFile();

$upload->maxSize = 3145728; //允许上传的最大字节

$upload->savePath = './Uploads/Goods/'; //上传目录

$upload->saveRule=uniqid; //上传文件的文件名保存规则 time uniqid com_create_guid uniqid

$upload->uploadReplace=true; //如果存在同名文件是否进行覆盖

$upload->allowExts =

array('jpg','jpeg','png','gif'); //允讲上传的文件后缀

$upload->allowTypes =

array('image/jpg','image/jpeg','image/png','image/gif'); //允讲上传的文件类型

$upload->thumb = true; //是否进行缩略图处理

$upload->thumbMaxWidth =

'80,400'; //缩略图最大宽度，多个使用逗号分隔

$upload->thumbMaxHeight =

'160,800'; //缩略图最大高度，多个使用逗号分隔

$upload->thumbPrefix='mini_,max_';//缩略图文件前缀

$upload->thumbRemoveOrigin =

false; //生成缩略图后是否删除原图

$upload->thumbPath =

'./Uploads/Goods/' . date('Y-m', time()) .'/';//缩略图保存路径

$upload->autoSub = true; //是否使用子目录保存上传文件

$upload->subType = date; //子目录创建方式，默认为hash，可以讴置为hash或者date

$upload->dateFormat = 'Y-m'; //子目录方式为date的时候指定日期格式

if (!$upload->upload()){

//获取成功上传后返回的图片路径

echo 1111;exit();

$info =

$upload->getUploadFileInfo();

p($info);exit;

return array('status' => 0,

'msg' => $upload->getErrorMsg());

} else {

//获取成功上传后返回的图片路径

$info =

$upload->getUploadFileInfo();

p($info);exit;

$thumb = explode('/',

$info[0]['savename']);

$data = array( //缩略图路径信息

'max' =>

$info[0]['savename'],

'medium' => $thumb[0] .

'/max_' . $thumb[1],

'mini' => $thumb[0] .

'/mini_' . $thumb[1]

);

return array('status' => 1,

'msg' => $data);

}

}