/// <summary>
        /// 圖片上傳
        /// </summary>
        /// <returns></returns>
        public ContentResult Upload(HttpPostedFileBase file)
        {
            if (file == null) { return Content("error|檔案不能為空"); }
            if (file.ContentLength > 10485760) { return Content("error|檔案10M以內"); }
            //如果是上傳檔案，再新增其他格式即可
            string filterStr = ".gif,.jpg,.jpeg,.bmp,.png";
            string fileExt = Path.GetExtension(file.FileName).ToLower();
            if (!filterStr.Contains(fileExt)) { return Content("error|檔案字尾不對"); }
            //防止黑客惡意繞過，從根本上判斷下檔案字尾
            if (!file.InputStream.CheckingExt())
            {
                //todo：一次危險記錄
                return Content("error|檔案字尾不對");
            }

            //todo: md5判斷一下檔案是否已經上傳過,如果已經上傳直接返回 return Content(縮圖地址#sqlPath);

            string path = string.Format("{0}/{1}", "/lotFiles", DateTime.Now.ToString("yyyy-MM-dd"));
            string fileName = string.Format("{0}{1}", Guid.NewGuid().ToString("N"), fileExt);
            string sqlPath = string.Format("{0}/{1}", path, fileName);
            string dirPath = Request.MapPath(path);
            if (!Directory.Exists(dirPath)) { Directory.CreateDirectory(dirPath); }
            try
            {
                //todo：未來寫縮圖的程式碼
                file.SaveAs(Path.Combine(dirPath, fileName));
                //todo: 未來寫存資料庫的Code
            }
            catch { return Content("error|檔案儲存失敗"); }
            return Content(string.Format("{0}#{1}", sqlPath, sqlPath));//第一個sqlPath以後換成縮圖的地址
        }