php s3 delete folder,php – 访问私有s3存储桶文件

我正在从php上传文件到s3 bucket.its上传成功,但当我检索图像时,我得到以下错误

AccessDenied

Access Denied

2006-03-09T07:25:20Z

2016-11-05T04:38:24Z

如果我在上传文件时公开,那么我可以检索它,但我想保护免受未经授权的用户.

上传文件代码

try{

$s3 = \Storage::disk('s3');

$filePath = $file->getClientOriginalName();

$s3->put($filePath, file_get_contents($val), 'private');

} catch (Aws\Exception\S3Exception $e) {

echo "There was an error uploading the file.\n"+$e;

}

在提出问题之前,我已经对许多网站进行了审核,但它并没有帮助我

第三个链接对我有用但是

1.在网址中传递访问密钥是否安全？

2.是否可以向经过身份验证的用户查看该文件？

public function get_s3_signed_url($bucket, $resource, $AWS_S3_KEY, $AWS_s3_secret_key, $expire_seconds) {

$expires = time()+$expire_seconds;

// S3 Signed URL creation

$string_to_sign = "GET\n\n\n{$expires}\n/".str_replace(".s3.amazonAWS.com","", $bucket)."/$resource";

$signature = urlencode(base64_encode((hash_hmac("sha1", utf8_encode($string_to_sign), $AWS_s3_secret_key, TRUE))));

$authentication_params = "AWSAccessKeyId=".$AWS_S3_KEY;

$authentication_params.= "&Expires={$expires}";

$authentication_params.= "&Signature={$signature}";

return $link = "http://s3.amazonAWS.com/{$bucket}/{$resource}?{$authentication_params}";

}

最佳答案 这里get_s3_signed_url函数返回具有访问密钥的url,不推荐使用.创建一个函数,它从存储桶中获取私有对象对象,并在服务器中本地创建文件/映像.使用新创建的图像的路径,并在完成后删除图像.

Zend中的代码：

require_once('Zend/Service/Amazon/S3.php');

$awsKey = 'your-key';

$awsSecretKey = 'your-secret-key';

$s3 = new Zend_Service_Amazon_S3($awsKey, $awsSecretKey);

$bucketName = 'your-bucket-name';

$objectName = $bucketName . '/image.jpg'; //image path

$info = $s3->getInfo($objectName);

if (is_array($info)) {

header('Content-type: ' . $info['type']);

header('Content-length: ' . $info['size']);

file_put_contents('image.jpg', file_get_contents($s3->getObject($objectName)));

header('Content-Description: File Transfer');

header("Content-Disposition: attachment; filename=\"image.jpg\"");

header('Content-Transfer-Encoding: binary');

header('Cache-Control: must-revalidate');

header('Pragma: public');

header('Expires: 0');

ob_clean();

flush();

readfile('image.jpg');

unlink('image.jpg');

} else {

header('HTTP/1.0 404 Not Found');

}

核心php中的代码：

require_once('S3.php');

$awsKey = 'your-key';

$awsSecretKey = 'your-secret-key';

$s3 = new S3($awsKey, $awsSecretKey);

$bucketName = 'your-bucket-name';

** To store/download one image at a time**

$objectName = "image.jpg"; //s3 image path

$tempFile = "image.jpg"; //temporary/local image path

$s3->getObject($bucketName, $objectName, $tempFile); //stores the image

if (filesize($tempFile)) {

header('Content-Description: File Transfer');

header('Content-Type: image/png');

header("Content-Disposition: attachment; filename=\"" . $tempFile . "\"");

header('Content-Transfer-Encoding: binary');

header('Cache-Control: must-revalidate');

header('Pragma: public');

header('Expires: 0');

header('Content-Length: ' . filesize($tempFile));

ob_clean();

flush();

readfile($tempFile); //downloads the image

unlink($tempFile); //deletes the image from local

}

**To store/download 'n' images at a time**

$s3ImagesFolder = 'all_images/'; //folder where all the images are

$bucketContents = $s3->getBucket($bucketName);

foreach ($bucketContents as $file) {

if ((strpos($file['name'], $s3ImagesFolder) > -1)) {

$tempFile = end(explode("/", $file['name']));

$s3->getObject($bucketName, $file['name'], $tempFile); // to store

//to download

if ($file['size']) {

header('Content-Description: File Transfer');

header('Content-Type: image/png');

header("Content-Disposition: attachment; filename=\"" . $tempFile . "\"");

header('Content-Transfer-Encoding: binary');

header('Cache-Control: must-revalidate');

header('Pragma: public');

header('Expires: 0');

header('Content-Length: ' . $file['size']);

ob_clean();

flush();

readfile($tempFile); //downloads the image

unlink($tempFile); //deletes the image from local

}

}

}