Movatterモバイル変換

[0]ホーム
URL:

Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

 Sign up
Appearance settings

Commit31b0a71

Browse files
committed
feature#19216 [HttpFoundation] AddUploadedFile::getClientOriginalPath() to support directory uploads (danielburger1337)
This PR was squashed before being merged into the 7.1 branch.Discussion----------[HttpFoundation] Add `UploadedFile::getClientOriginalPath()` to support directory uploadsSee#19212 andsymfony/symfony#52493Edit: I just realized that `@alexandre`-daubois created PR#19215 for this as well.Just for the record, I don't care which one gets merged.Commits-------4120857 [HttpFoundation] Add `UploadedFile::getClientOriginalPath()` to support directory uploads
2 parentsccf7a6e +4120857 commit31b0a71

File tree

2 files changed

+19
-5
lines changed

2 files changed

+19
-5
lines changed

‎controller/upload_file.rst‎

Lines changed: 12 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -194,13 +194,23 @@ There are some important things to consider in the code of the above controller:
194194
users. This also applies to the files uploaded by your visitors. The ``UploadedFile``
195195
class provides methods to get the original file extension
196196
(:method:`Symfony\\Component\\HttpFoundation\\File\\UploadedFile::getClientOriginalExtension`),
197-
the original file size (:method:`Symfony\\Component\\HttpFoundation\\File\\UploadedFile::getSize`)
198-
and the original file name (:method:`Symfony\\Component\\HttpFoundation\\File\\UploadedFile::getClientOriginalName`).
197+
the original file size (:method:`Symfony\\Component\\HttpFoundation\\File\\UploadedFile::getSize`),
198+
the original file name (:method:`Symfony\\Component\\HttpFoundation\\File\\UploadedFile::getClientOriginalName`)
199+
and the original file path (:method:`Symfony\\Component\\HttpFoundation\\File\\UploadedFile::getClientOriginalPath`).
199200
However, they are considered *not safe* because a malicious user could tamper
200201
that information. That's why it's always better to generate a unique name and
201202
use the:method:`Symfony\\Component\\HttpFoundation\\File\\UploadedFile::guessExtension`
202203
method to let Symfony guess the right extension according to the file MIME type;
203204

205+
..note::
206+
207+
If a directory was uploaded, ``getClientOriginalPath`` will contain the **webkitRelativePath** as provided by the browser.
208+
Otherwise this value will be identical to ``getClientOriginalName``.
209+
210+
..versionadded::7.1
211+
212+
The ``getClientOriginalPath`` method was introduced in Symfony 7.1.
213+
204214
You can use the following code to link to the PDF brochure of a product:
205215

206216
..code-block::html+twig

‎reference/forms/types/file.rst‎

Lines changed: 7 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -55,6 +55,10 @@ You might calculate the filename in one of the following ways::
5555
// use the original file name
5656
$file->move($directory, $file->getClientOriginalName());
5757

58+
// when "webkitdirectory" upload was used
59+
// otherwise the value will be the same as getClientOriginalName
60+
// $file->move($directory, $file->getClientOriginalPath());
61+
5862
// compute a random name and try to guess the extension (more secure)
5963
$extension = $file->guessExtension();
6064
if (!$extension) {
@@ -63,9 +67,9 @@ You might calculate the filename in one of the following ways::
6367
}
6468
$file->move($directory, rand(1, 99999).'.'.$extension);
6569

66-
Using the original name via ``getClientOriginalName()``is not safe as it
67-
could have been manipulated by the end-user. Moreover, it can contain
68-
characters that are not allowed in file names. You should sanitize thename
70+
Using the original name via ``getClientOriginalName()``or ``getClientOriginalPath``
71+
is not safe as itcould have been manipulated by the end-user. Moreover, it can contain
72+
characters that are not allowed in file names. You should sanitize thevalue
6973
before using it directly.
7074

7175
Read:doc:`/controller/upload_file` for an example of how to manage a file

0 commit comments

Comments
 (0)
[8]ページ先頭
©2009-2025 Movatter.jp