blocks|key|641037|text|我通过在ModelForm上使用clean_your_field方法来处理此问题。您可以在settings.py中设置一个可接受的文件扩展名列表，以便在您的clean方法中进行检查，但是settings.py中没有内置任何内容来限制上传类型。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|641038|例如，Django-Filebrowser采用了在settings.py中创建可接受的文件扩展名列表的方法。|641039|希望这能帮到你。|641040|entityMap^0|0|0|0^^$0|@$1|2|3|4|5|6|7|H|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|I|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|J|8|@]|9|@]|A|$]]|$1|F|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|G|$]]

I handle this by using a clean_[your_field] method on a ModelForm. You could set a list of acceptable file extensions in settings.py to check against in your clean method, but there's nothing built-into settings.py to limit upload types.

Django-Filebrowser, for example, takes the approach of creating a list of acceptable file extensions in settings.py.

Hope that helps you out.

blocks|key|641092|text|创建验证方法，如下所示：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|641093|def+validate_file_extension(value):
++++if+not+value.name.endswith('.pdf'):
++++++++raise+ValidationError(u'Error+message')|code-block|syntax|javascript|641094|并将其包含在FileField验证器中，如下所示：|641095|actual_file+=+models.FileField(upload_to='uploaded_files',+validators=[validate_file_extension])|641096|此外，您应该在setting.py上创建一个列表并遍历它，而不是手动设置您的模型允许哪些扩展。|641097|编辑|641098|要筛选多个文件：|641099|def+validate_file_extension(value):
++import+os
++ext+=+os.path.splitext(value.name)[1]
++valid_extensions+=+['.pdf','.doc','.docx']
++if+not+ext+in+valid_extensions:
++++raise+ValidationError(u'File+not+supported!')|641100|entityMap^0|0|0|0|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|U|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|V|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|W|8|@]|9|@]|A|$]]|$1|I|3|J|5|D|7|X|8|@]|9|@]|A|$E|F]]|$1|K|3|L|5|6|7|Y|8|@]|9|@]|A|$]]|$1|M|3|N|5|6|7|Z|8|@]|9|@]|A|$]]|$1|O|3|P|5|6|7|10|8|@]|9|@]|A|$]]|$1|Q|3|R|5|D|7|11|8|@]|9|@]|A|$E|F]]|$1|S|3|-4|5|6|7|12|8|@]|9|@]|A|$]]]|T|$]]

Create a validation method like:

<pre><code>def validate_file_extension(value):
 if not value.name.endswith('.pdf'):
 raise ValidationError(u'Error message')
</code></pre>

and include it on the FileField validators like this:

<pre><code>actual_file = models.FileField(upload_to='uploaded_files', validators=[validate_file_extension])
</code></pre>

Also, instead of manually setting which extensions your model allows, you should create a list on your setting.py and iterate over it.

<h2>Edit</h2>

To filter for multiple files:

<pre><code>def validate_file_extension(value):
 import os
 ext = os.path.splitext(value.name)[1]
 valid_extensions = ['.pdf','.doc','.docx']
 if not ext in valid_extensions:
 raise ValidationError(u'File not supported!')
</code></pre>

blocks|key|641199|text|一种更简单的方法是在您的表单中这样做|type|unstyled|depth|inlineStyleRanges|entityRanges|data|641200|file+=+forms.FileField(widget=forms.FileInput(attrs={'accept':'application/pdf'}))|code-block|syntax|javascript|641201|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

An easier way of doing it is as below in your Form

<pre><code>file = forms.FileField(widget=forms.FileInput(attrs={'accept':'application/pdf'}))
</code></pre>

blocks|key|641165|text|为了更通用，我编写了一个小类ExtensionValidator，它扩展了Django的内置RegexValidator。它接受单个或多个扩展名，以及可选的自定义错误消息。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|641166|class+ExtensionValidator(RegexValidator):
++++def+__init__(self,+extensions,+message=None):
++++++++if+not+hasattr(extensions,+'__iter__'):
++++++++++++extensions+=+[extensions]
++++++++regex+=+'\.(%25s)$'+%25+'%7C'.join(extensions)
++++++++if+message+is+None:
++++++++++++message+=+'File+type+not+supported.+Accepted+types+are:+%25s.'+%25+',+'.join(extensions)
++++++++super(ExtensionValidator,+self).__init__(regex,+message)

++++def+__call__(self,+value):
++++++++super(ExtensionValidator,+self).__call__(value.name)|code-block|syntax|javascript|641167|现在，您可以定义一个与字段内联的验证器，例如：|641168|my_file+=+models.FileField('My+file',+validators=[ExtensionValidator(['pdf',+'doc',+'docx'])])|641169|entityMap^0|E|I|1A|E|0|0|0|0^^$0|@$1|2|3|4|5|6|7|Q|8|@$9|R|A|S|B|C]|$9|T|A|U|B|C]]|D|@]|E|$]]|$1|F|3|G|5|H|7|V|8|@]|D|@]|E|$I|J]]|$1|K|3|L|5|6|7|W|8|@]|D|@]|E|$]]|$1|M|3|N|5|H|7|X|8|@]|D|@]|E|$I|J]]|$1|O|3|-4|5|6|7|Y|8|@]|D|@]|E|$]]]|P|$]]

For a more generic use, I wrote a small class <code>ExtensionValidator</code> that extends Django's built-in <code>RegexValidator</code>. It accepts single or multiple extensions, as well as an optional custom error message. 

<pre><code>class ExtensionValidator(RegexValidator):
 def __init__(self, extensions, message=None):
 if not hasattr(extensions, '__iter__'):
 extensions = [extensions]
 regex = '\.(%s)$' % '|'.join(extensions)
 if message is None:
 message = 'File type not supported. Accepted types are: %s.' % ', '.join(extensions)
 super(ExtensionValidator, self).__init__(regex, message)

 def __call__(self, value):
 super(ExtensionValidator, self).__call__(value.name)
</code></pre>

Now you can define a validator inline with the field, e.g.:

<pre><code>my_file = models.FileField('My file', validators=[ExtensionValidator(['pdf', 'doc', 'docx'])])
</code></pre>

blocks|key|641300|text|Django从1.11开始就有一个用于此目的的FileExtensionValidator：|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|641301|class+SomeDocument(Model):
++++document+=+models.FileFiled(validators=[
++++++++FileExtensionValidator(allowed_extensions=['pdf',+'doc'])])|code-block|syntax|javascript|641302|正如@savp提到的，你还需要定制这个小部件，这样用户一开始就不能选择不合适的文件：|641303|class+SomeDocumentForm(ModelForm):
++++class+Meta:
++++++++model+=+SomeDocument
++++++++widgets+=+{'document':+FileInput(attrs={'accept':+'application/pdf,application/msword'})}
++++++++fields+=+'__all__'|641304|您可能需要摆弄accept来准确地找出您的目的所需的MIME类型。|style|CODE|641305|正如其他人所提到的，这些都不能阻止有人将badstuff.exe重命名为innocent.pdf并通过您的表单上传-您仍然需要安全地处理上传的文件。一旦有了内容，像python-magic库这样的东西可以帮助您确定实际的文件类型。|641306|entityMap|0|LINK|mutability|MUTABLE|url|https://docs.djangoproject.com/en/dev/ref/validators/#fileextensionvalidator|1|https://pypi.org/project/python-magic/^0|N|M|0|0|0|0|0|7|6|0|K|C|10|C|2A|C|1|0^^$0|@$1|2|3|4|5|6|7|12|8|@]|9|@$A|13|B|14|1|15]]|C|$]]|$1|D|3|E|5|F|7|16|8|@]|9|@]|C|$G|H]]|$1|I|3|J|5|6|7|17|8|@]|9|@]|C|$]]|$1|K|3|L|5|F|7|18|8|@]|9|@]|C|$G|H]]|$1|M|3|N|5|6|7|19|8|@$A|1A|B|1B|O|P]]|9|@]|C|$]]|$1|Q|3|R|5|6|7|1C|8|@$A|1D|B|1E|O|P]|$A|1F|B|1G|O|P]]|9|@$A|1H|B|1I|1|1J]]|C|$]]|$1|S|3|-4|5|6|7|1K|8|@]|9|@]|C|$]]]|T|$U|$5|V|W|X|C|$Y|Z]]|10|$5|V|W|X|C|$Y|11]]]]

Django since 1.11 has a <a href="https://docs.djangoproject.com/en/dev/ref/validators/#fileextensionvalidator" rel="nofollow noreferrer">FileExtensionValidator</a> for this purpose:
<pre><code>class SomeDocument(Model):
 document = models.FileFiled(validators=[
 FileExtensionValidator(allowed_extensions=['pdf', 'doc'])])
</code></pre>
As @savp mentioned, you will also want to customize the widget so that users can't select inappropriate files in the first place:
<pre><code>class SomeDocumentForm(ModelForm):
 class Meta:
 model = SomeDocument
 widgets = {'document': FileInput(attrs={'accept': 'application/pdf,application/msword'})}
 fields = '__all__'
</code></pre>
You may need to fiddle with <code>accept</code> to figure out exactly what MIME types are needed for your purposes.
As others have mentioned, none of this will prevent someone from renaming <code>badstuff.exe</code> to <code>innocent.pdf</code> and uploading it through your form—you will still need to handle the uploaded file safely. Something like the <a href="https://pypi.org/project/python-magic/" rel="nofollow noreferrer">python-magic</a> library can help you determine the actual file type once you have the contents.

blocks|key|641387|text|我发现检查文件类型的最好方法是检查它的内容类型。我还会补充说，进行类型检查的最佳位置是表单验证。我将有一个表单和一个验证，如下所示：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|641388|class+UploadFileForm(forms.Form):
++++file+=+forms.FileField()

++++def+clean_file(self):
++++++++data+=+self.cleaned_data['file']

++++++++#+check+if+the+content+type+is+what+we+expect
++++++++content_type+=+data.content_type
++++++++if+content_type+==+'application/pdf':
++++++++++++return+data
++++++++else:
++++++++++++raise+ValidationError(_('Invalid+content+type'))|code-block|syntax|javascript|641389|以下文档链接可能会很有帮助：https://docs.djangoproject.com/en/3.1/ref/files/uploads/和https://docs.djangoproject.com/en/3.1/ref/forms/validation/|offset|length|641390|entityMap|0|LINK|mutability|MUTABLE|url|https://docs.djangoproject.com/en/3.1/ref/files/uploads/|1|https://docs.djangoproject.com/en/3.1/ref/forms/validation/^0|0|0|E|1K|0|1Z|1N|1|0^^$0|@$1|2|3|4|5|6|7|U|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|V|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|W|8|@]|9|@$I|X|J|Y|1|Z]|$I|10|J|11|1|12]]|A|$]]|$1|K|3|-4|5|6|7|13|8|@]|9|@]|A|$]]]|L|$M|$5|N|O|P|A|$Q|R]]|S|$5|N|O|P|A|$Q|T]]]]

I find that the best way to check the type of a file is by checking its content type. I will also add that one the best place to do type checking is in form validation. I would have a form and a validation as follows:
<pre><code>class UploadFileForm(forms.Form):
 file = forms.FileField()

 def clean_file(self):
 data = self.cleaned_data['file']

 # check if the content type is what we expect
 content_type = data.content_type
 if content_type == 'application/pdf':
 return data
 else:
 raise ValidationError(_('Invalid content type'))
</code></pre>
The following documentation links can be helpful:
<a href="https://docs.djangoproject.com/en/3.1/ref/files/uploads/" rel="nofollow noreferrer">https://docs.djangoproject.com/en/3.1/ref/files/uploads/</a> and <a href="https://docs.djangoproject.com/en/3.1/ref/forms/validation/" rel="nofollow noreferrer">https://docs.djangoproject.com/en/3.1/ref/forms/validation/</a>

My goal is to limit a FileField on a Django ModelForm to PDFs and Word Documents. The answers I have googled all deal with creating a separate file handler, but I am not sure how to do so in the context of a ModelForm. Is there a setting in settings.py I may use to limit upload file types?

How to limit file types on file uploads for ModelForms with FileFields?

Django

我的目标是将Django ModelForm上的FileField限制为PDF和Word文档。我用谷歌搜索的答案都涉及创建一个单独的文件处理程序，但我不确定如何在ModelForm的上下文中做到这一点。settings.py中有没有可以用来限制上传文件类型的设置？

问如何在使用FileFields的ModelForms中限制文件上传的文件类型？
EN

回答 6

Stack Overflow用户

Stack Overflow用户

Stack Overflow用户

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问如何在使用FileFields的ModelForms中限制文件上传的文件类型？EN

回答 6

Stack Overflow用户

Stack Overflow用户

Stack Overflow用户

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问如何在使用FileFields的ModelForms中限制文件上传的文件类型？
EN