How can PHP variables be properly checked and validated before using them in file operations?

When working with file operations in PHP, it is important to properly check and validate variables before using them to prevent security vulnerabilities such as directory traversal attacks. One way to do this is by using functions like `realpath()` to get the absolute path of a file and then compare it with a base directory to ensure it falls within the expected boundaries. Additionally, you can use functions like `is_file()` or `is_dir()` to verify if a file or directory exists before performing operations on it.

$baseDir = '/path/to/base/directory/';

$filename = $_POST['filename']; // Assuming the filename is received from a form input

$absolutePath = realpath($baseDir . $filename);

if ($absolutePath && strpos($absolutePath, $baseDir) === 0) {
    // Proceed with file operations
    if (is_file($absolutePath)) {
        // Perform file operations
    } else {
        echo 'File does not exist.';
    }
} else {
    echo 'Invalid file path.';
}