What are the best practices for handling file paths and file uploads in PHP to avoid errors and ensure smooth functionality?

When handling file paths and file uploads in PHP, it is important to sanitize user input to prevent directory traversal attacks and ensure that file paths are properly formatted. Additionally, it is crucial to set the correct permissions on directories where files will be uploaded to, and validate file types and sizes to prevent malicious uploads. 

// Sanitize user input for file paths
$uploadDirectory = 'uploads/';
$fileName = basename($_FILES['file']['name']);
$filePath = $uploadDirectory . $fileName;

// Check if file type is allowed
$allowedTypes = ['jpg', 'jpeg', 'png', 'gif'];
$fileType = pathinfo($filePath, PATHINFO_EXTENSION);
if (!in_array($fileType, $allowedTypes)) {
    die('Error: File type not allowed');
}

// Check file size
$maxFileSize = 5 * 1024 * 1024; // 5MB
if ($_FILES['file']['size'] > $maxFileSize) {
    die('Error: File size too large');
}

// Move uploaded file to designated directory
if (move_uploaded_file($_FILES['file']['tmp_name'], $filePath)) {
    echo 'File uploaded successfully';
} else {
    echo 'Error uploading file';
}

Keywords

file paths file uploads PHP functions error handling smooth functionality

Related Questions