PHP框架的安全最佳实践：避免常见陷阱，确保系统安全

use Illuminate\Http\Request;
use Illuminate\Support\Facades\Validator;
use Illuminate\Validation\Rule;

class UserController extends Controller
{
    public function store(Request $request)
    {
        $validator = Validator::make($request->all(), [
            'name' => 'required|min:3',
            'email' => 'required|email|unique:users',
            'password' => 'required|min:8',
            'profile_picture' => [
                'required',
                'image',
                'max:1024',
                Rule::in(['png', 'jpg', 'jpeg'])
            ]
        ]);

        if ($validator->fails()) {
            return response()->json(['errors' => $validator->errors()], 422);
        }

        $hashedPassword = bcrypt($request->password);

        $user = User::create([
            'name' => $request->name,
            'email' => $request->email,
            'password' => $hashedPassword
        ]);

        if ($request->hasFile('profile_picture')) {
            $profilePicture = $request->file('profile_picture');
            $path = $profilePicture->storeAs('public/avatars', $profilePicture->getClientOriginalName());
            $user->profile_picture = $path;
            $user->save();
        }

        return response()->json(['success' => true], 201);
    }
}