.net上传图片之使用第三方平台七牛上传图片接口

对于一些小平台，小网站，由于开发人员、技术有限，导致开发的一些诸如上传文件或者图片的功能，往往容易被攻击。这里我建议大家使用第三方存储上传内容:

七牛：http://www.qiniu.com/

之前给公司开发了一个账号中心的功能，里面包含了头像上传的功能，由于曾经公司服务器被攻击过（原因就是应用包含上传功能，暴露给不法分子利用），所以这次准备把头像存储到七牛。

应用场景：我把邮件、短信、上传头像（图片）这些功能抽象到了coreservice中（是使用servicestack开发的），供其他应用来调用。

这是coreservice代码，直接调七牛存储图片的接口：

public enum FileType
    {
        AVATAR,
        CONFIG,
        PHOTO,
        KF,
    }

[Route("/storage/file", "POST")]
    public class FileUploadReq
    {
        public string FileName { get; set; }
        public FileType fileType { get; set; }
    }

    public class FileUploadRes
    {
        public bool bRet { get; set; }
        public string Message { get; set; }
        public string Key { get; set; }
        public string HashCode { get; set; }
    }

public FileUploadRes Any(FileUploadReq request)
        {
            FileUploadRes res = new FileUploadRes();
            res.bRet = true;
            res.Message = "ok";

            Qiniu.Conf.Config.ACCESS_KEY = System.Configuration.ConfigurationManager.AppSettings["QiniuAccessKey"];
            Qiniu.Conf.Config.SECRET_KEY = System.Configuration.ConfigurationManager.AppSettings["QiniuSecretKey"];

            Stream upStream = null;
            foreach (var uploadedFile in base.Request.Files)
            {
                upStream = uploadedFile.InputStream;
                //var newFilePath = Path.Combine(targetDir.FullName, uploadedFile.FileName);
                //uploadedFile.SaveTo(newFilePath);
            }


            string strButketName = "";
            switch (request.fileType)
            {
                case FileType.AVATAR:
                    strButketName = "avatar6998";
                    break;
                case FileType.CONFIG:
                    strButketName = "config6998";
                    break;
                case FileType.PHOTO:
                    strButketName = "photo6998";
                    break;
                case FileType.KF:
                    strButketName = "kf6998";
                    break;
            }


            IOClient target = new IOClient();
            //string key = NewKey;
            //PrintLn(key);
            PutExtra extra = new PutExtra(); // TODO: 初始化为适当的值
            //extra.MimeType = request.MimeType;
            //extra.Crc32 = 123;
            //extra.CheckCrc = CheckCrcType.CHECK;
            //extra.Params = new System.Collections.Generic.Dictionary<string, string>();
            PutPolicy put = new PutPolicy(strButketName + ":" + request.FileName);
            //TmpFIle file = new TmpFIle(1024 * 10);
            //target.PutFinished += new EventHandler<PutRet>((o, e) =>
            //{
            //    file.Del();
            //    if (e.OK)
            //    {
            //        RSHelper.RSDel(Bucket, file.FileName);
            //    }
            //});

            PutRet ret = target.Put(put.Token(), request.FileName, upStream, extra);
            res.bRet = ret.OK;
            if (!ret.OK)
            {
                res.Message = ret.Response;

                log.ErrorFormat("qiniu upload error [{0}]", ret.Response);
                log.Error("qiniu exception", ret.Exception);
            }
            else
            {
                res.Key = ret.key;
                res.HashCode = ret.Hash;
            }
            
            return res;
        }

这是应用调用：

public JsonServiceClient getClient()
        {
            string strApiAddr = ConfigurationManager.AppSettings["StrApiAddr"];
            return new JsonServiceClient(strApiAddr);
        }

        public FileUploadDaoRes FileUpload(FileUploadDaoReq model)
        {
            FileUploadDaoRes ret = new FileUploadDaoRes();
            try
            {
                FileUploadReq req = new FileUploadReq();
                req.FileName = model.FileName;
                req.fileType = (FileType)model.fileType;
                var result = getClient().PostFileWithRequest<FileUploadRes>("storage/file", model.stream, "aaa.jpg", req);
                if (result.bRet)
                {
                    ret.bRet = true;
                    ret.Key = result.Key;
                    ret.HashCode = result.HashCode;
                }
                else
                {
                    ret.Message = result.Message;
                }
            }
            catch (Exception ex)
            {
                log.ErrorFormat("FileUpload:{0}", ex.Message);
                ret.Message = ex.Message;
            }
            return ret;
        }

主要是获取图片流，再把图片上传到服务器