So thinking through a possible common situation I’ll be running into shortly. Can / should I use fopen() directly on $_POST after a validation has been run to manipulate a CSV file that I plan on inserting into a table or should I move it to the file system first?
Not sure what you’re asking here. fopen is used to open files on the filesystem. Since $_POST is not a file, you can not use fopen on it.
You could however use it on $_FILES, but I typically move the file locally (out of the temp folder) before working with it.
Not strictly true…
<?php
$post = fopen('php://input');