52

我想编写 Java 应用程序，它将使用 PHP 将文件上传到 Apache 服务器。Java 代码使用 Jakarta HttpClient 库版本 4.0 beta2：

import java.io.File;
import org.apache.http.HttpEntity;
import org.apache.http.HttpResponse;
import org.apache.http.HttpVersion;
import org.apache.http.client.HttpClient;
import org.apache.http.client.methods.HttpPost;
import org.apache.http.entity.FileEntity;
import org.apache.http.impl.client.DefaultHttpClient;
import org.apache.http.params.CoreProtocolPNames;
import org.apache.http.util.EntityUtils;


public class PostFile {
  public static void main(String[] args) throws Exception {
    HttpClient httpclient = new DefaultHttpClient();
    httpclient.getParams().setParameter(CoreProtocolPNames.PROTOCOL_VERSION, HttpVersion.HTTP_1_1);

    HttpPost httppost = new HttpPost("http://localhost:9002/upload.php");
    File file = new File("c:/TRASH/zaba_1.jpg");

    FileEntity reqEntity = new FileEntity(file, "binary/octet-stream");

    httppost.setEntity(reqEntity);
    reqEntity.setContentType("binary/octet-stream");
    System.out.println("executing request " + httppost.getRequestLine());
    HttpResponse response = httpclient.execute(httppost);
    HttpEntity resEntity = response.getEntity();

    System.out.println(response.getStatusLine());
    if (resEntity != null) {
      System.out.println(EntityUtils.toString(resEntity));
    }
    if (resEntity != null) {
      resEntity.consumeContent();
    }

    httpclient.getConnectionManager().shutdown();
  }
}

PHP 文件upload.php非常简单：

<?php
if (is_uploaded_file($_FILES['userfile']['tmp_name'])) {
  echo "File ". $_FILES['userfile']['name'] ." uploaded successfully.\n";
  move_uploaded_file ($_FILES['userfile'] ['tmp_name'], $_FILES['userfile'] ['name']);
} else {
  echo "Possible file upload attack: ";
  echo "filename '". $_FILES['userfile']['tmp_name'] . "'.";
  print_r($_FILES);
}
?>

阅读响应我得到以下结果：

executing request POST http://localhost:9002/upload.php HTTP/1.1

HTTP/1.1 200 正常
可能的文件上传攻击：文件名''。
大批
(
)

所以请求成功，我能够与服务器通信，但是 PHP 没有注意到文件 - 方法is_uploaded_file返回false并且$_FILES变量为空。我不知道为什么会发生这种情况。我跟踪了 HTTP 响应和请求，它们看起来不错：
请求是：

POST /upload.php HTTP/1.1
内容长度：13091
内容类型：二进制/八位字节流
主机：本地主机：9002
连接：保持活动
用户代理：Apache-HttpClient/4.0-beta2 (java 1.5)
期望：100-继续

˙Ř˙ŕ.....二进制文件的其余部分...

和回应：

HTTP/1.1 100 继续

HTTP/1.1 200 正常
日期：格林威治标准时间 2009 年 7 月 1 日星期三 06:51:57
服务器：Apache/2.2.8 (Win32) DAV/2 mod_ssl/2.2.8 OpenSSL/0.9.8g mod_autoindex_color PHP/5.2.5 mod_jk/1.2.26
X-Powered-By: PHP/5.2.5
内容长度：51
保活：超时=5，最大值=100
连接：保持活动
内容类型：文本/html

可能的文件上传攻击：filename ''.Array
(
)

我在带有 xampp 的本地 windows xp 和远程 Linux 服务器上都对此进行了测试。我也尝试使用以前版本的 HttpClient - 3.1 版 - 结果更加不清楚，is_uploaded_file返回了false，但是$_FILES数组中填充了正确的数据。

4

10 回答 10

66

好的，我使用的 Java 代码是错误的，下面是正确的 Java 类：

import java.io.File;
import org.apache.http.HttpEntity;
import org.apache.http.HttpResponse;
import org.apache.http.HttpVersion;
import org.apache.http.client.HttpClient;
import org.apache.http.client.methods.HttpPost;
import org.apache.http.entity.mime.MultipartEntity;
import org.apache.http.entity.mime.content.ContentBody;
import org.apache.http.entity.mime.content.FileBody;
import org.apache.http.impl.client.DefaultHttpClient;
import org.apache.http.params.CoreProtocolPNames;
import org.apache.http.util.EntityUtils;


public class PostFile {
  public static void main(String[] args) throws Exception {
    HttpClient httpclient = new DefaultHttpClient();
    httpclient.getParams().setParameter(CoreProtocolPNames.PROTOCOL_VERSION, HttpVersion.HTTP_1_1);

    HttpPost httppost = new HttpPost("http://localhost:9001/upload.php");
    File file = new File("c:/TRASH/zaba_1.jpg");

    MultipartEntity mpEntity = new MultipartEntity();
    ContentBody cbFile = new FileBody(file, "image/jpeg");
    mpEntity.addPart("userfile", cbFile);


    httppost.setEntity(mpEntity);
    System.out.println("executing request " + httppost.getRequestLine());
    HttpResponse response = httpclient.execute(httppost);
    HttpEntity resEntity = response.getEntity();

    System.out.println(response.getStatusLine());
    if (resEntity != null) {
      System.out.println(EntityUtils.toString(resEntity));
    }
    if (resEntity != null) {
      resEntity.consumeContent();
    }

    httpclient.getConnectionManager().shutdown();
  }
}

注意使用 MultipartEntity。

于 2009-07-01T09:15:39.543 回答
29

对于那些试图使用的更新MultipartEntity...

org.apache.http.entity.mime.MultipartEntity在 4.3.1 中已弃用。

您可以使用MultipartEntityBuilder来创建HttpEntity对象。

File file = new File();

HttpEntity httpEntity = MultipartEntityBuilder.create()
    .addBinaryBody("file", file, ContentType.create("image/jpeg"), file.getName())
    .build();

对于 Maven 用户，该类在以下依赖项中可用（几乎与 fervisa 的答案相同，只是有更高版本）。

<dependency>
  <groupId>org.apache.httpcomponents</groupId>
  <artifactId>httpmime</artifactId>
  <version>4.3.1</version>
</dependency>
于 2014-01-06T05:00:00.323 回答
3

正确的方法是使用多部分 POST 方法。有关客户端的示例代码，请参见此处。

对于 PHP，有许多可用的教程。这是我发现的第一个。我建议您先使用 html 客户端测试 PHP 代码，然后再尝试使用 java 客户端。

于 2009-07-01T07:14:55.513 回答
3

我遇到了同样的问题，发现 httpclient 4.x 需要文件名才能与 PHP 后端一起使用。httpclient 3.x 并非如此。

所以我的解决方案是在 FileBody 构造函数中添加一个 name 参数。ContentBody cbFile = new FileBody(file, "image/jpeg", "FILE_NAME");

希望能帮助到你。

于 2013-11-09T00:58:27.027 回答
2

较新版本的示例在这里。

以下是原始代码的副本：

/*
 * ====================================================================
 * Licensed to the Apache Software Foundation (ASF) under one
 * or more contributor license agreements.  See the NOTICE file
 * distributed with this work for additional information
 * regarding copyright ownership.  The ASF licenses this file
 * to you under the Apache License, Version 2.0 (the
 * "License"); you may not use this file except in compliance
 * with the License.  You may obtain a copy of the License at
 *
 *   http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing,
 * software distributed under the License is distributed on an
 * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
 * KIND, either express or implied.  See the License for the
 * specific language governing permissions and limitations
 * under the License.
 * ====================================================================
 *
 * This software consists of voluntary contributions made by many
 * individuals on behalf of the Apache Software Foundation.  For more
 * information on the Apache Software Foundation, please see
 * <http://www.apache.org/>.
 *
 */
package org.apache.http.examples.entity.mime;

import java.io.File;

import org.apache.http.HttpEntity;
import org.apache.http.client.methods.CloseableHttpResponse;
import org.apache.http.client.methods.HttpPost;
import org.apache.http.entity.ContentType;
import org.apache.http.entity.mime.MultipartEntityBuilder;
import org.apache.http.entity.mime.content.FileBody;
import org.apache.http.entity.mime.content.StringBody;
import org.apache.http.impl.client.CloseableHttpClient;
import org.apache.http.impl.client.HttpClients;
import org.apache.http.util.EntityUtils;

/**
 * Example how to use multipart/form encoded POST request.
 */
public class ClientMultipartFormPost {

    public static void main(String[] args) throws Exception {
        if (args.length != 1)  {
            System.out.println("File path not given");
            System.exit(1);
        }
        CloseableHttpClient httpclient = HttpClients.createDefault();
        try {
            HttpPost httppost = new HttpPost("http://localhost:8080" +
                    "/servlets-examples/servlet/RequestInfoExample");

            FileBody bin = new FileBody(new File(args[0]));
            StringBody comment = new StringBody("A binary file of some kind", ContentType.TEXT_PLAIN);

            HttpEntity reqEntity = MultipartEntityBuilder.create()
                    .addPart("bin", bin)
                    .addPart("comment", comment)
                    .build();


            httppost.setEntity(reqEntity);

            System.out.println("executing request " + httppost.getRequestLine());
            CloseableHttpResponse response = httpclient.execute(httppost);
            try {
                System.out.println("----------------------------------------");
                System.out.println(response.getStatusLine());
                HttpEntity resEntity = response.getEntity();
                if (resEntity != null) {
                    System.out.println("Response content length: " + resEntity.getContentLength());
                }
                EntityUtils.consume(resEntity);
            } finally {
                response.close();
            }
        } finally {
            httpclient.close();
        }
    }

}
于 2015-01-27T22:22:32.650 回答
1

有我使用 apache http 库发送带有帖子的图像的工作解决方案（这里非常重要的是边界添加它在我的连接中没有它就无法工作）：

            ByteArrayOutputStream baos = new ByteArrayOutputStream();
            bitmap.compress(Bitmap.CompressFormat.PNG, 100, baos);
            byte[] imageBytes = baos.toByteArray();

            HttpClient httpclient = new DefaultHttpClient();
            HttpPost httpPost = new HttpPost(StaticData.AMBAJE_SERVER_URL + StaticData.AMBAJE_ADD_AMBAJ_TO_GROUP);

            String boundary = "-------------" + System.currentTimeMillis();

            httpPost.setHeader("Content-type", "multipart/form-data; boundary="+boundary);

            ByteArrayBody bab = new ByteArrayBody(imageBytes, "pic.png");
            StringBody sbOwner = new StringBody(StaticData.loggedUserId, ContentType.TEXT_PLAIN);
            StringBody sbGroup = new StringBody("group", ContentType.TEXT_PLAIN);

            HttpEntity entity = MultipartEntityBuilder.create()
                    .setMode(HttpMultipartMode.BROWSER_COMPATIBLE)
                    .setBoundary(boundary)
                    .addPart("group", sbGroup)
                    .addPart("owner", sbOwner)
                    .addPart("image", bab)
                    .build();

            httpPost.setEntity(entity);

            try {
                HttpResponse response = httpclient.execute(httpPost);
                ...then reading response
于 2014-08-14T13:18:48.650 回答
1

啊，你只需要在

FileBody constructor. ContentBody cbFile = new FileBody(file, "image/jpeg", "FILE_NAME");

希望能帮助到你。

于 2014-11-24T09:51:15.673 回答
1

我知道我迟到了，但下面是处理这个问题的正确方法，关键是使用InputStreamBody代替FileBody上传多部分文件。

   try {
        HttpClient httpclient = new DefaultHttpClient();
        HttpPost postRequest = new HttpPost("https://someserver.com/api/path/");
        postRequest.addHeader("Authorization",authHeader);
        //don't set the content type here            
        //postRequest.addHeader("Content-Type","multipart/form-data");
        MultipartEntity reqEntity = new MultipartEntity(HttpMultipartMode.BROWSER_COMPATIBLE);


        File file = new File(filePath);
        FileInputStream fileInputStream = new FileInputStream(file);
        reqEntity.addPart("parm-name", new InputStreamBody(fileInputStream,"image/jpeg","file_name.jpg"));

        postRequest.setEntity(reqEntity);
        HttpResponse response = httpclient.execute(postRequest);

        }catch(Exception e) {
            Log.e("URISyntaxException", e.toString());
   }
于 2016-06-09T11:55:50.953 回答
0

如果您在本地 WAMP 上对此进行测试，您可能需要为文件上传设置临时文件夹。您可以在 PHP.ini 文件中执行此操作：

upload_tmp_dir = "c:\mypath\mytempfolder\"

您需要授予文件夹权限才能进行上传 - 您需要授予的权限因您的操作系统而异。

于 2009-07-01T07:13:52.143 回答
0

对于那些难以实现接受的答案（需要 org.apache.http.entity.mime.MultipartEntity）的人，您可能正在使用 org.apache.httpcomponents 4.2.* 在这种情况下，您必须显式安装 httpmime依赖项，在我的情况：

<dependency>
    <groupId>org.apache.httpcomponents</groupId>
    <artifactId>httpmime</artifactId>
    <version>4.2.5</version>
</dependency>
于 2013-08-27T16:59:45.347 回答