Laravel 8：拆分代码后上传图片出现403 Forbidden错误求助

我创建了LostFoundService服务类，最初的storeLostFound方法同时处理图片上传与LostFound数据创建，运行正常无403错误，但违反了单一职责原则。于是我将代码拆分为storeLostFound（仅处理数据创建）和uploadImages（处理图片上传）两个方法，在控制器中调用后，上传的图片出现403 Forbidden错误，请问这是什么原因？

原正常代码（服务类） #

public function storeLostFound(Request $request)
{
    // Upload Images
    $LFImage = ($request->hasFile('LFImage'))
        ? $request->file('LFImage')->store('lostFound/lostItems')
        : NULL;

    $handoverImage = ($request->hasFile('handoverStatement'))
        ? $request->file('handoverStatement')->store('lostFound/handoverStatements')
        : NULL;

    // Create a new instance
    return LostFound::create([
        'LFNumber'              => $request->LFNumber,
        'claimingDate'          => $request->claimingDate,
        'lostItem'              => $request->lostItem,
        'zoneNumber'            => $request->zoneNumber,
        'receivedDate'          => $request->receivedDate,
        'lostLocation'          => $request->lostLocation,
        'foundBy'               => $request->foundBy,
        'claimedBy'             => $request->claimedBy,
        'LFAction'              => $request->LFAction,
        'LFImage'               => $LFImage,
        'handoverStatement'     => $handoverImage,
        'handover'              => $request->handover,
        'cccEmployee'           => $request->cccEmployee,
    ]);
}

原控制器调用代码 #

// Add new Record.
public function store(LostFoundRequest $request, LostFoundService $lostFoundService)
{
    $lostFoundService->storeLostFound($request);
    return redirect( route('data-entry.lost-and-found.index') )->with('success', 'Item Added Successfully');
}

拆分后的服务类代码 #

public function storeLostFound(array $LFData): LostFound
{
    // Create a new instance
    $lostFound = LostFound::create([
        'LFNumber'              => $LFData['LFNumber'],
        'claimingDate'          => $LFData['claimingDate'],
        'lostItem'              => $LFData['lostItem'],
        'zoneNumber'            => $LFData['zoneNumber'],
        'receivedDate'          => $LFData['receivedDate'],
        'lostLocation'          => $LFData['lostLocation'],
        'foundBy'               => $LFData['foundBy'],
        'claimedBy'             => $LFData['claimedBy'],
        'LFAction'              => $LFData['LFAction'],
        'LFImage'               => $LFData['LFImage'],
        'handoverStatement'     => $LFData['handoverStatement'],
        'handover'              => $LFData['handover'],
        'cccEmployee'           => $LFData['cccEmployee'],
    ]);
    return $lostFound;
}

public function uploadImages(Request $request)
{
    return ($request->hasFile('LFImage'))
        ? $request->file('LFImage')->store('/lostFound/lostItems')
        : NULL;
}

拆分后的控制器调用代码 #

// Add new Record.
public function store(LostFoundRequest $request, LostFoundService $lostFoundService)
{
    $LFImage = $lostFoundService->uploadImages($request);
    $lostFoundService->storeLostFound($request->validated() + ['LFImage' => $LFImage]);
    return redirect( route('data-entry.lost-and-found.index') )->with('success', 'Item Added Successfully');
}

问题原因及解决方法 #

核心原因 #

拆分后的uploadImages方法中，存储路径使用了开头带斜杠的绝对路径：store('/lostFound/lostItems')，而原代码是相对路径store('lostFound/lostItems')。

在Laravel的文件存储逻辑中，开头的斜杠会被解析为服务器文件系统的根目录（而非storage/app下的相对目录），web服务器进程通常没有根目录的写入权限，因此触发403 Forbidden错误。

另外，拆分后的代码还遗漏了handoverStatement图片的上传逻辑，这会导致该字段无法正确存储图片路径。

修复步骤 #

1. 修正存储路径，去掉开头的斜杠，同时补全handoverStatement的上传逻辑：

public function uploadImages(Request $request)
{
    $uploaded = [];
    // 处理LFImage
    $uploaded['LFImage'] = $request->hasFile('LFImage')
        ? $request->file('LFImage')->store('lostFound/lostItems')
        : null;
    // 处理handoverStatement
    $uploaded['handoverStatement'] = $request->hasFile('handoverStatement')
        ? $request->file('handoverStatement')->store('lostFound/handoverStatements')
        : null;
    return $uploaded;
}

2. 调整控制器调用逻辑，合并验证后的数据与上传的图片路径：

public function store(LostFoundRequest $request, LostFoundService $lostFoundService)
{
    $uploadedImages = $lostFoundService->uploadImages($request);
    $lostFoundService->storeLostFound(array_merge($request->validated(), $uploadedImages));
    return redirect(route('data-entry.lost-and-found.index'))->with('success', 'Item Added Successfully');
}

3. 确认目录权限：确保storage/app/lostFound及其子目录的所有者为web服务器用户（如www-data），权限设置为755或775，保证服务器进程有写入权限。

内容的提问来源于stack exchange，提问作者Abdulrahman Mushref