php file upload protect against phat

upload.php

if ($_FILES['file']['error'] !== UPLOAD_ERR_OK) {
    // Handle upload error
}

$filePath = $_FILES['file']['tmp_name'];
$signature = file_get_contents('phar://' . $filePath . '/.signature');

if ($signature !== 'GBMB') {
    // Invalid PHAR file
}

// Move the uploaded file to a permanent location
$uploadDir = '/path/to/upload/directory/';
$fileName = $_FILES['file']['name'];
$filePath = $uploadDir . $fileName;

if (!move_uploaded_file($_FILES['file']['tmp_name'], $filePath)) {
    // Handle file move error
}