diff --git a/service/app/admin/controller/UploadController.php b/service/app/admin/controller/UploadController.php
new file mode 100644
index 00000000..5e88b520
--- /dev/null
+++ b/service/app/admin/controller/UploadController.php
@@ -0,0 +1,41 @@
+<?php
+
+namespace app\admin\controller;
+
+use app\model\Admins;
+use app\model\Uploads;
+use app\model\Backs;
+use app\model\Finances;
+use app\model\Onlines;
+use app\model\Orders;
+use DateTime;
+use Qiniu\Auth;
+use support\Log;
+use support\Redis;
+use support\Request;
+
+class UploadController extends base
+{
+    public function index(Request $request)
+    {
+        $file = $request->file("file");
+        
+        if (!$file->isValid()) {
+            return $this->error(400, 'upload fail, code=' . $file->getUploadErrorCode());
+        }
+
+        $now = date_create();
+        $savepath = sprintf("/uploads/%d/%s/%s", $request->admin->id, $now->format("YmdHisu"), $file->getUploadName());
+        $file->move(public_path(). $savepath);
+    
+        $item = new Uploads();
+        $item->admin_id = $request->admin->id;
+        $item->filesize = $file->getSize();
+        $item->filepath = $savepath;
+        $item->mime = $file->getUploadMimeType();
+        $item->create_at = $now->getTimestamp();
+        $item->save();
+
+        return $this->success($savepath);
+    }
+}
\ No newline at end of file
diff --git a/service/app/middleware/adminAuth.php b/service/app/middleware/adminAuth.php
index b8548531..0cf77571 100644
--- a/service/app/middleware/adminAuth.php
+++ b/service/app/middleware/adminAuth.php
@@ -21,7 +21,8 @@ class adminAuth implements MiddlewareInterface
             //白名单
             $url = [
                 '/admin/login',
-                'admin/index/avatar'
+                'admin/index/avatar',
+                'admin/upload/index',
             ];
             if(in_array($path, $url)) {
                 return $next($request);
diff --git a/service/app/model/Uploads.php b/service/app/model/Uploads.php
new file mode 100644
index 00000000..6e553e26
--- /dev/null
+++ b/service/app/model/Uploads.php
@@ -0,0 +1,36 @@
+<?php
+
+namespace app\model;
+
+/**
+ * uploads 上传文件
+ * @property integer $id (主键)
+ * @property integer $admin_id 谁上传的
+ * @property integer $filesize 文件大小
+ * @property string $filepath 存储路径
+ * @property string $mime mime 类型
+ * @property integer $create_at 上传时间
+ */
+class Uploads extends base
+{
+    /**
+     * The connection name for the model.
+     *
+     * @var string|null
+     */
+    protected $connection = 'mysql';
+
+    /**
+     * The table associated with the model.
+     *
+     * @var string
+     */
+    protected $table = 'uploads';
+
+    /**
+     * The primary key associated with the table.
+     *
+     * @var string
+     */
+    protected $pk = 'id';
+}
\ No newline at end of file