**Course Title:** Mastering Zend Framework (Laminas): Building Robust Web Applications **Section Title:** File Storage and Asset Management **Topic:** Create a file upload feature in a Laminas application, ensuring secure storage and retrieval of files.(Lab topic) **Overview:** In this lab topic, you will learn how to create a file upload feature in a Laminas application, ensuring secure storage and retrieval of files. You will understand the importance of secure file handling and learn how to implement best practices for secure file storage and retrieval. **Prerequisites:** Before starting this lab topic, make sure you have completed the previous topics in the course, including: * Introduction to Zend Framework (Laminas) and Development Setup * Understanding the MVC architecture in Laminas * Exploring the directory structure and configuration files * Defining and managing routes in Laminas * Creating controllers to handle requests and responses * Building views with Laminas View and template rendering * Passing data between controllers and views **Lab Task:** Create a file upload feature in a Laminas application, ensuring secure storage and retrieval of files. **Step 1: Create a File Upload Controller** Create a new controller called `FileUploadController.php` in the `Application\Controller` directory. This controller will handle the file upload request. ```php namespace Application\Controller; use Laminas\Mvc\Controller\AbstractActionController; use Laminas\Mvc\Controller\ControllerActionEvent; use Laminas\Mvc\Controller\RendererInterface; use Laminas\Http\Request; use Laminas\Http\Response; class FileUploadController extends AbstractActionController { public function indexAction(Request $request, RendererInterface $renderer) { $file = $request->getPost('file'); if (!$file) { $this->getRenderer()->-response->setStatusCode(400); $this->getRenderer()->renderer-> TattooError('File not uploaded'); } else { $filePath = sys_get_temp_dir(). '/'. uniqid(). '.'. $file->getType(); file_put_contents($filePath, file_get_contents($file)); $this->getRenderer()->response->setStatusCode(201); $this->getRenderer()->response->setContent($filePath); } } } ``` **Step 2: Create a File Upload Form** Create a new file called `upload-form.phtml` in the `Application\View\Bootstrap` directory. This file will contain the file upload form. ```html <form action="/file/upload" method="post" enctype="multipart/form-data"> <input type="file" name="file" /> <button type="submit">Upload File</button> </form> ``` **Step 3: Create a File Upload Model** Create a new file called `FileUploadModel.php` in the `Application\Model` directory. This model will handle the file upload logic. ```php namespace Application\Model; use Laminas\Db\EntityManager; use Laminas\Db\TableGateway_TABLE; use Laminas\Db\Sql\Sql; class FileUploadModel { private $entityManager; public function __construct(EntityManager $entityManager) { $this->entityManager = $entityManager; } public function uploadFile(Request $request) { $file = $request->getPost('file'); if (!$file) { throw new \Exception('File not uploaded'); } else { $filePath = sys_get_temp_dir(). '/'. uniqid(). '.'. $file->getType(); file_put_contents($filePath, file_get_contents($file)); return $filePath; } } } ``` **Step 4: Configure File Storage** Create a new file called `config_DELAY.set.php` in the `application/config/autoload` directory. This file will configure the file storage settings. ```php <?php return [ 'filesystems' => [ 'php' => [ 'type' => 'php', 'options' => [ 'allowedRenameUsers' => '/\.php$/', 'destinationPathFormat' => '/var/www/'. REMOTE_ADDR. '/'. ], ], ], ]; ``` **Step 5: Test the File Upload Feature** Open a web browser and navigate to `http://localhost/movie/upload`. Click the "Upload File" button and select a file to upload. The file should be uploaded to the system's temporary directory. **Step 6: Clean Up** Make sure to clean up the uploaded file by deleting it from the system's temporary directory. **Key Concepts:** * Secure file handling * File storage and retrieval * Best practices for secure file storage and retrieval **Practical Takeaways:** * Create a file upload feature in a Laminas application using a controller, model, and form. * Use secure file handling practices to prevent file corruption and unauthorized access. * Use a temporary directory to store uploaded files. * Use a file storage configuration to configure file storage settings. **Questions:** * What is the purpose of the `upload-form.phtml` file? * How does the `FileUploadController` handle the file upload request? * What is the purpose of the `FileUploadModel`? * How does the `config_DELAY.set.php` file configure file storage settings? **Leave a comment:** If you have any questions or need further clarification on this topic, please leave a comment below.