What best practices should be followed when combining JavaScript, HTML forms, and PHP for file manipulation tasks like writing to a file?

When combining JavaScript, HTML forms, and PHP for file manipulation tasks like writing to a file, it is important to validate user input on the client-side using JavaScript to prevent any malicious code injection. Additionally, sanitize the user input on the server-side using PHP to further secure the application. Finally, use PHP functions like fopen, fwrite, and fclose to safely write to the file on the server.

<?php
if ($_SERVER["REQUEST_METHOD"] == "POST") {
    $data = $_POST['data'];

    // Sanitize user input
    $data = htmlspecialchars($data);

    // Write to file
    $file = fopen("file.txt", "w");
    fwrite($file, $data);
    fclose($file);

    echo "Data written to file successfully.";
}
?>