Symfony项目图片上传报无效文件：Windows下如何设置文件夹权限？

在Symfony项目中按官方文档配置图片表单字段后，提交含图片的表单时触发File约束的mimeTypesMessage错误，提示临时文件不是有效图片，但实际上传的文件类型为image/jpeg。尝试相关方案后，仍不清楚Windows系统下如何设置上传目标文件夹权限，使用Symfony文档中的umask()函数也无效果。

相关代码与错误信息 #

表单定义 #

->add('picture', FileType::class, [
  'label' => 'Illustration (jpg, png or jpeg file)',
  'mapped'=> false,
  'required' => false,
  'constraints' => [
    new File([
      'mimeTypes' => ['images/*'],
      'mimeTypesMessage' => "file : {{ file }} is not a valid image. ({{ name }}, {{ type }}, {{ types }})"
    ])
  ]
])

错误输出 #

file : "C:\\xampp\\tmp\\php714A.tmp" is not a valid image. ("matthew-hIgWo0wtx74-unsplash.jpg", "image/jpeg", "images/*")

services.yaml配置 #

parameters:
    pictures_directory: '%kernel.project_dir%/public/uploads/pictures'
    targetDirectory: '%kernel.project_dir%/public/uploads/'
services:
    App\Service\FileUploader:
        arguments:
            $targetDirectory: '%pictures_directory%'

FileUploader类 #

class FileUploader {

    public function __construct(
        private string $targetDirectory,
        private SluggerInterface $slugger
    ) {
        // ...
    }

    public function upload(UploadedFile $file): string {

        // $originalFilename = pathinfo($file->getClientOriginalName(), PATHINFO_FILENAME);
        // safe inclusion of the file name in the URL
        // $safeFilename = $this->slugger->slug($originalFilename);
        // generate a unique name and let symfony guess the right extension for don't trust the input provided by user
        $file->getError();
        $newFilename = md5(uniqid().'.'.$file->guessExtension());

        try {
            // moving file chere pictures are stored
            $file->move($this->getTargetDirectory(), $newFilename);
        } catch (FileException $fileError) {
            echo 'Erreur lors du téléchargement du fichier';
            throw $fileError;
        }

        return $newFilename;
    }

    public function getTargetDirectory(): string {

        return $this->targetDirectory;
    }
}

控制器代码 #

#[Route('/new-ad', name: 'app_new_ad')]
    public function handleBoatAdForm(
        Request $request,
        EntityManagerInterface $entityManager,
        FileUploader $fileUploader,
        ): Response {

        $boatAd = new Boat();
        $form = $this->createForm(BoatAdType::class, $boatAd);
        Clock::set(new MockClock());
        $clock = Clock::get();
        $user = $this->getUser();

        $form->handleRequest($request);
        if ($form->isSubmitted() && $form->isValid()) {
            
            $pictureFile = $form->get('picture')->getData();

            if ($pictureFile) { // check if a file is upload and processed it only in this case
                $pictureFilename = $fileUploader->upload($pictureFile);
                // updates the pictureFilename property to store the Image file instead of its contents
                $boatAd->setPictureFilename($pictureFilename);
            }
            
            $boatAd = $form->getData();
            $boatAd->setDateCreation($clock->now());
            $boatAd->setFKBoatUser($user);

            $entityManager->persist($boatAd);
            $entityManager->flush();

            return $this->redirectToRoute('app_index');
        }

        return $this->render('pages/boat_ad_form/index.html.twig', [
            'form' => $form,
        ]);
    }

解决方案 #

1. 修复MIME类型校验错误 #

你表单中mimeTypes配置的['images/*']是错误的，标准MIME类型通配符应为image/*（去掉末尾的s），也可以指定具体的允许类型：

'constraints' => [
    new File([
        'mimeTypes' => ['image/*', 'image/jpeg', 'image/png'],
        'mimeTypesMessage' => "文件 : {{ file }} 不是有效图片。(文件名: {{ name }}, 文件类型: {{ type }}, 允许类型: {{ types }})"
    ])
]

这是触发“临时文件不是有效图片”错误的核心原因，和权限无关。

2. Windows系统下设置上传文件夹权限 #

Windows不需要使用umask()，直接通过文件资源管理器配置：

• 找到项目中的public/uploads/pictures文件夹
• 右键→属性→安全选项卡
• 给运行Web服务器的用户（如XAMPP的Apache用户，或你当前登录的Windows用户）添加读取、写入、修改权限
• 如果使用Symfony内置Web服务器（symfony server:start），给当前登录用户添加该文件夹的完全控制权限即可

另外，可在FileUploader构造函数中自动创建目标目录（避免目录不存在导致的错误）：

public function __construct(
    private string $targetDirectory,
    private SluggerInterface $slugger
) {
    if (!is_dir($this->targetDirectory)) {
        mkdir($this->targetDirectory, 0777, true);
    }
}

Windows下mkdir的权限参数会被忽略，但层级创建目录的功能正常生效。

内容的提问来源于stack exchange，提问作者Yvialga