Upload 5 files

Dockerfile

@@ -4,11 +4,12 @@ FROM python:3.9-slim
 # 设置工作目录
 WORKDIR /code
 
-# 安装系统依赖 (psycopg2 需要)
+# 安装系统依赖 (psycopg2 需要；ffmpeg 用于音频上传重编码净化)
 RUN apt-get update && apt-get install -y --no-install-recommends \
     libpq-dev \
     ca-certificates \
     libssl-dev \
+    ffmpeg \
     && rm -rf /var/lib/apt/lists/*
 
 # 先复制依赖文件，利用 Docker 缓存层
@@ -25,7 +26,7 @@ USER appuser
 # 健康检查
 HEALTHCHECK --interval=30s --timeout=5s --retries=3 CMD python -c "import urllib.request; urllib.request.urlopen('http://localhost:7860/health')" || exit 1
 
-# force rebuild: 2026-05-22
+# force rebuild: 2026-08-16
 
 # 启动命令
 CMD ["uvicorn", "app:app", "--host", "0.0.0.0", "--port", "7860"]

app.py

@@ -15,6 +15,7 @@ import json
 import mimetypes
 import logging
 import time
+import subprocess
 import datetime
 import 数据库连接 as db
 import asyncio
@@ -341,6 +342,45 @@ def proxy_hf_image(url: str = None, path: str = None):
 # ==========================================
 from image_moderation import moderate_image_sync, ModerationResult
 
+# ==========================================
+# 🎵 音频安全净化：重编码压缩，剥离元数据与隐藏附加信息
+# ==========================================
+AUDIO_TRANSCODE_ARGS = {
+    "mp3": ["-acodec", "libmp3lame", "-b:a", "192k"],
+    "wav": ["-acodec", "pcm_s16le", "-ar", "44100"],
+    "m4a": ["-acodec", "aac", "-b:a", "192k"],
+    "ogg": ["-acodec", "libvorbis", "-b:a", "192k"],
+}
+
+def sanitize_audio_content(content: bytes, ext: str) -> bytes:
+    """🔒 用 ffmpeg 重编码压缩音频并剥离元数据/隐藏附加信息；处理失败一律拒绝上传，保障平台安全"""
+    src_path = f"/tmp/audio_src_{uuid.uuid4().hex[:8]}.{ext}"
+    dst_path = f"/tmp/audio_dst_{uuid.uuid4().hex[:8]}.{ext}"
+    try:
+        with open(src_path, "wb") as f:
+            f.write(content)
+        cmd = ["ffmpeg", "-y", "-i", src_path, "-vn", "-map_metadata", "-1", "-fflags", "+bitexact"] \
+            + AUDIO_TRANSCODE_ARGS[ext] + [dst_path]
+        try:
+            result = subprocess.run(cmd, capture_output=True, timeout=120)
+        except subprocess.TimeoutExpired:
+            logger.error(f"AUDIO_SANITIZE_TIMEOUT | ext={ext}")
+            raise HTTPException(status_code=400, detail="音频处理超时，请上传更短的音频")
+        if result.returncode != 0:
+            logger.error(f"AUDIO_SANITIZE_FAIL | ext={ext} | {result.stderr[-500:]}")
+            raise HTTPException(status_code=400, detail="音频文件解析失败，请转换格式后重新上传")
+        with open(dst_path, "rb") as f:
+            sanitized = f.read()
+        if not sanitized:
+            raise HTTPException(status_code=400, detail="音频处理结果为空，请重新上传")
+        logger.info(f"AUDIO_SANITIZE_OK | ext={ext} | {len(content)} -> {len(sanitized)} bytes")
+        return sanitized
+    finally:
+        for p in (src_path, dst_path):
+            if os.path.exists(p):
+                os.remove(p)
+
+
 @app.post("/api/upload")
 def upload_file(file: UploadFile = File(...), file_type: str = Form(...), current_user: str = Depends(require_auth)):
     content = file.file.read() 
@@ -363,6 +403,8 @@ def upload_file(file: UploadFile = File(...), file_type: str = Form(...), curren
             max_size = 10 * 1024 * 1024  # 其他图片: 10MB
     elif file_type == "post_video":
         max_size = 100 * 1024 * 1024
+    elif file_type == "post_audio":
+        max_size = 30 * 1024 * 1024   # 音乐提示词音频：30MB
         
     if len(content) > max_size:
         raise HTTPException(status_code=400, detail=f"文件过大，{file_type} 类型请限制在 {max_size // (1024*1024)}MB 以内")
@@ -373,8 +415,16 @@ def upload_file(file: UploadFile = File(...), file_type: str = Form(...), curren
     allowed_exts = ["jpg", "jpeg", "png", "gif", "webp", "json", "mp4"]
     if file_type == "post_video":
         allowed_exts = ["mp4", "webm", "mov"]
+    elif file_type == "post_audio":
+        allowed_exts = ["mp3", "wav", "m4a", "ogg"]
     if ext not in allowed_exts:
         raise HTTPException(status_code=400, detail=f"不支持的文件格式，{file_type} 类型仅支持 {', '.join(allowed_exts)}")
+
+    # 🔒 音频安全净化：重编码压缩，剥离可能附带的元数据与隐藏附加信息
+    if file_type == "post_audio":
+        content = sanitize_audio_content(content, ext)
+        if len(content) > max_size:
+            raise HTTPException(status_code=400, detail=f"音频处理后仍超过 {max_size // (1024*1024)}MB 限制，请上传更短的音频")
     
     # 📝 审计日志：记录上传操作
     logger.info(f"UPLOAD | account={current_user} | filename={file.filename} | file_type={file_type}")
@@ -388,8 +438,8 @@ def upload_file(file: UploadFile = File(...), file_type: str = Form(...), curren
                 detail=f"图片内容审核未通过：{moderation_result.label or '内容不合规'}"
             )
         
-    if file_type == "post_video":
-        safe_filename = f"post_video_{uuid.uuid4().hex[:8]}.{ext}"
+    if file_type in ("post_video", "post_audio"):
+        safe_filename = f"{file_type}_{uuid.uuid4().hex[:8]}.{ext}"
     else:
         file_hash = hashlib.md5(content).hexdigest()[:10]
         safe_filename = f"{file_type}_{file_hash}.{ext}"

models.py

@@ -277,6 +277,7 @@ class PromptCreate(BaseModel):
     cover_image: str                        # 封面图
     media_type: str = "image"               # "image" 或 "video"（示例媒体类型）
     video_url: Optional[str] = None         # 示例视频 URL（仅 media_type=video）
+    audio_url: Optional[str] = None         # 示例音频 URL（仅音乐提示词，图片+音频方案；视频可选）
     images: Optional[List[str]] = None      # 图像提示词图片列表（最多9张，首张为封面）
     is_original: bool = False               # 原创作品标记
     price: int = 0                          # 定价（0=免费）
@@ -291,6 +292,7 @@ class PromptUpdate(BaseModel):
     cover_image: Optional[str] = None
     media_type: Optional[str] = None
     video_url: Optional[str] = None
+    audio_url: Optional[str] = None         # 示例音频 URL（仅音乐提示词；传 null 表示清除）
     images: Optional[List[str]] = None      # 图像提示词图片列表（最多9张，首张为封面）
     is_original: Optional[bool] = None      # 原创作品标记
     price: Optional[int] = None

router_prompts.py

@@ -460,6 +460,11 @@ async def create_prompt(prompt: PromptCreate, current_user: str = Depends(requir
     # 图像提示词的图片列表（首张即封面）；视频提示词不保留图片列表
     images = _sanitize_images(prompt.images) if media_type == "image" else []
 
+    # 🎵 音乐提示词支持音频示例（图片+音频方案，视频可选）；非音乐类型不保留
+    audio_url = (prompt.audio_url or "").strip() or None
+    if prompt.prompt_type != "music":
+        audio_url = None
+
     new_prompt = {
         "id": f"prompt_{int(time.time())}_{uuid.uuid4().hex[:6]}",
         "prompt_type": prompt.prompt_type,
@@ -470,6 +475,7 @@ async def create_prompt(prompt: PromptCreate, current_user: str = Depends(requir
         "cover_image": prompt.cover_image,
         "media_type": media_type,
         "video_url": video_url,
+        "audio_url": audio_url,
         "images": images,
         "is_original": bool(prompt.is_original),
         "price": price,
@@ -567,6 +573,10 @@ async def update_prompt(prompt_id: str, update_data: PromptUpdate, current_user:
                     prompt["video_url"] = update_data.video_url
                     if update_data.video_url:
                         prompt["media_type"] = "video"
+                if update_data.audio_url is not None:
+                    # 🎵 音频仅音乐提示词保留；传空字符串/null 表示清除
+                    audio_url = (update_data.audio_url or "").strip() or None
+                    prompt["audio_url"] = audio_url if prompt.get("prompt_type") == "music" else None
                 # 类型变更后补正关联字段（pydantic 无法区分未传与 null，统一在此收尾）
                 if prompt.get("media_type") == "image":
                     prompt["video_url"] = None