开源在线教育点播系统。

\app\Http\Controllers\Backend\Api\V1\UploadController.php

public function imageUpload(Request $request)
    {
        $url = $request->input('url');
        if (!$url) {
            return $this->error('请输入图片地址');
        }
        $extension = '';
        if (preg_match('/\.png/i', $url)) {
            $extension = 'png';
        } elseif (preg_match('/\.jpg/i', $url)) {
            $extension = 'jpg';
        } elseif (preg_match('/\.gif/i', $url)) {
            $extension = 'gif';
        } elseif (preg_match('/\.jpeg/i', $url)) {
            $extension = 'jpeg';
        }
        if (!$extension) {
            return $this->error('无法检测图片格式');
        }

        try {
            // 将图片保存到本地临时文件
            $content = file_get_contents($url);
            $tmpPath = config('meedu.upload.image.path') . '/' . Str::random(32) . '.' . $extension;

            // 保存到storage
            $disk = config('meedu.upload.image.disk');
            Storage::disk($disk)->put($tmpPath, $content);
            $url = url(Storage::disk($disk)->url($tmpPath));

            return $this->successData([
                'path' => $tmpPath,
                'url' => $url,
            ]);
        } catch (\Exception $e) {
            return $this->error($e->getMessage());
        }
    }

读取一个url，然后保存文件。后缀判断逻辑错误，仅判断了包含这几个后缀，应该判断为以这几个后缀结尾。 payload： {"url":"file:///www\/wwwroot\/demo.meedu.vip/.png/../.env"}

文件： /app/Http/Requests/Backend/Administrator/AdministratorRequest.php

   public function filldata()
    {
        $data = ['name' => $this->input('name', '')];
        $this->input('password') && $data['password'] = bcrypt($this->input('password'));
        if ($this->isMethod('post')) {
            $data['email'] = $this->input('email');
        }
        return $data;
    }

如果编辑管理员资料的时候不填密码， 那么则会吧此管理员的密码值为空。 问题代码：$this->input('password') && $data['password'] = bcrypt($this->input('password'));

1. 修改密码和修改用户资料的功能分开。
2. 在此处过过滤，密码值为空则 unsert($data['password'])

有增加相关功能的想法么？ 类似于添加讲师管理的功能吧。 协同者可以有自己的管理账号，自己添加课程，看到自己的收益，全站订阅可以设置分成比例之类的。 如果本身主机性能一般，能通过七牛云之类的云视频平台来做视频存放就更爽了。 最近想和朋友一起做硬件课程来着，本来想自己学Laravel来弄个试试，没想到搜到你的项目了。

meedu/vendor/swiftmailer/swiftmailer/lib/classes/Swift/Mime/Headers/MailboxHeader.php

这个文件的normalizeMailboxes 函数，foreach ($mailboxes as $key => $value)执行的时候，$key如果是数据库里的值，会直接用整条json作为email的addr，从而导致最后发送邮件失败。

log里我打印了信息：

[2019-03-28 11:03:40] local.INFO: eaddr valueExample [2019-03-28 11:03:40] local.INFO: eaddr:[email protected] [2019-03-28 11:03:40] local.INFO: eaddr value [2019-03-28 11:03:40] local.INFO: eaddr:{"id":1,"email":"[email protected]","created_at":"2019-03-22 21:00:57","updated_at":"2019-03-22 21:00:57"} [2019-03-28 11:03:40] local.ERROR: Address in mailbox given [{"id":1,"email":"[email protected]","created_at":"2019-03-22 21:00:57","updated_at":"2019-03-22 21:00:57"}] does not comply with R FC 2822, 3.6.2. {"exception":"[object] (Swift_RfcComplianceException(code: 0): Address in mailbox given [{"id":1,"email":"[email protected]","created_at":"2019-03-22 21:00:57","upd ated_at":"2019-03-22 21:00:57"}] does not comply with RFC 2822, 3.6.2.

向开源精神致敬~ 发现个小问题, 还望抽空指导一下...

点击幻灯片菜单会报错, 错误码为 500, 但是没有错误提示.

我追了一下源码, 发现没有定义 backend/api/v1/slider 路由, 而且我在app/Http/Controllers/Backend/Api/V1目录下也没有找到slider控制器, 请问是我安装的问题, 还是源码未完善?

@Qsnh @git-zjx

浏览器console报错 Access to XMLHttpRequest at 'http://192.168.199.128/backend/api/v1/captcha/image' from origin 'http://192.168.199.128:88' has been blocked by CORS policy: No 'Access-Control-Allow-Origin' header is present on the requested

测试网站 ：https://vip.english.thingswell.cn/

备案号指向的URL应该是 https://beian.miit.gov.cn/ 实际URL是 http://www.beian.miit.gov.cn/

按照备案要求，不合规。

后台管理只有修改备案号，没有修改备案地址的功能。

MeEdu版本 v3.7.2 后台版本 v3.7 内核版本 Laravel 6.18.42 PHP版本 7.2.33

meedu版本：v3.7.4

alibabacloud/client扩展版本：v1.5.30

环境：PHP7.2

在测试的时候，阿里云视频点播的节点选择的是北京(cn-beijing)，配置完成后，上传点播视频时报错

[2021-04-17 08:37:59] local.ERROR: exception {"message":"InvalidStorage.NotFound: The storageLocation does not exist. RequestId: ****-9E1F-4367-821D-****GET \"http://vod.cn-shanghai.aliyuncs.com\" 403","code":403,"line":343,"params":{"title":"****.mp4","filename":"****.mp4"},"url":"http://*****/backend/api/v1/video/token/aliyun/create","method":"POST","ip":["******"]} {"request_id":"78RibM*****"}

经过查询阿里云官方文档，在调用 CreateUploadVideo 方法时,需要设置 host(uri) 属性，具体实现如下：

<?php
use AlibabaCloud\Client\AlibabaCloud;
use AlibabaCloud\Client\Exception\ClientException;
use AlibabaCloud\Client\Exception\ServerException;

// Download：https://github.com/aliyun/openapi-sdk-php
// Usage：https://github.com/aliyun/openapi-sdk-php/blob/master/README.md

AlibabaCloud::accessKeyClient('<accessKeyId>', '<accessSecret>')
                        ->regionId('cn-beijing')
                        ->asDefaultClient();

try {
    $result = AlibabaCloud::rpc()
                          ->product('vod')
                          // ->scheme('https') // https | http
                          ->version('2017-03-21')
                          ->action('CreateUploadVideo')
                          ->method('POST')
                          ->host('vod.cn-beijing.aliyuncs.com')
                          ->options([
                                        'query' => [
                                          'Title' => "***.mp4",
                                          'FileName' => "***.mp4",
                                        ],
                                    ])
                          ->request();
    print_r($result->toArray());
} catch (ClientException $e) {
    echo $e->getErrorMessage() . PHP_EOL;
} catch (ServerException $e) {
    echo $e->getErrorMessage() . PHP_EOL;
}

经过整体排查，其他调用vod接口部分也存在相关问题，一并添加设置host方法即可。 建议增加配置项增加设置host属性的灵活性。

Bumps laravel/framework from 6.18.42 to 6.20.12.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Bumps ini from 1.3.5 to 1.3.8.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.