Lesson 25/101

Tutorials Next.js Tutorial

File Upload — Complete Guide

File Upload — Complete Guide: free step-by-step lesson with examples, common mistakes, and interview tips — part of Next.js Tutorial on Toolliyo Academy.

On this page

Next.js Tutorial (LearnHub) · Lesson 24 of 100

File Upload

Beginner ✓IntermediateAdvancedProfessional

Intermediate · 2 — Building apps · ~14 min read · Module 3: Data & Forms

Introduction

You know the basics now. Here we use File Upload in real LearnHub screens — layouts, data, and APIs. Still plain language, just a bit more depth. File uploads send multipart form data to Server Actions or Route Handlers. Validate type and size, then store in S3, Cloudinary, or disk — never trust the filename. Instructors upload course thumbnails and assignment PDFs. Students submit homework files. Unsafe uploads are a common attack vector.

Data and forms power course lists, enrollments, and progress. Learn these patterns slowly — test in a small page first.

When will you use this?

Reach for data fetching and Server Actions when pages need database content or form submissions.

  • Enrollments, quiz scores, and course progress load from the server — often with Server Actions.
  • Forms that enroll a student in a course use Server Actions instead of a separate REST call.

Real-world: Flipkart-style catalog

The E-commerce team building Flipkart-style catalog uses File Upload to let instructors upload thumbnails and assignment files safely. shoppers never see the TypeScript files — they just get a fast, reliable search, filters, and fast product listing pages.

Production-style code

'use server';

import { writeFile } from 'fs/promises';
import path from 'path';

export async function uploadThumbnail(formData: FormData) {
  const file = formData.get('file');
  if (!(file instanceof File) || file.size > 2_000_000) {
    return { error: 'File must be under 2MB' };
  }

  const bytes = await file.arrayBuffer();
  const buffer = Buffer.from(bytes);
  const safeName = `${Date.now()}-${file.name.replace(/[^a-z0-9.-]/gi, '')}`;
  const dest = path.join(process.cwd(), 'public', 'uploads', safeName);
  await writeFile(dest, buffer);
  return { url: `/uploads/${safeName}` };
}

What happens in production: In Flipkart-style catalog, getting File Upload right means shoppers trust the search, filters, and fast product listing pages every day.

Lesson example (start here)

Copy this smaller example first. Once it works, compare it with the real-world code above.

'use server';

import { writeFile } from 'fs/promises';
import path from 'path';

export async function uploadThumbnail(formData: FormData) {
  const file = formData.get('file');
  if (!(file instanceof File) || file.size > 2_000_000) {
    return { error: 'File must be under 2MB' };
  }

  const bytes = await file.arrayBuffer();
  const buffer = Buffer.from(bytes);
  const safeName = `${Date.now()}-${file.name.replace(/[^a-z0-9.-]/gi, '')}`;
  const dest = path.join(process.cwd(), 'public', 'uploads', safeName);
  await writeFile(dest, buffer);
  return { url: `/uploads/${safeName}` };
}

Line-by-line walkthrough

CodeWhat it means
'use server';Server Actions directive — function runs only on the server.
import { writeFile } from 'fs/promises';Imports a module so you can use its exports in this file.
import path from 'path';Imports a module so you can use its exports in this file.
export async function uploadThumbnail(formData: FormData) {Exported async function — often a Server Action or API handler.
const file = formData.get('file');Part of the File Upload example — read it together with the lines before and after.
if (!(file instanceof File) || file.size > 2_000_000) {Part of the File Upload example — read it together with the lines before and after.
return { error: 'File must be under 2MB' };Part of the File Upload example — read it together with the lines before and after.
}Closes a block started by { above.
const bytes = await file.arrayBuffer();Part of the File Upload example — read it together with the lines before and after.
const buffer = Buffer.from(bytes);Part of the File Upload example — read it together with the lines before and after.
const safeName = `${Date.now()}-${file.name.replace(/[^a-z0-9.-]/gi, '')}`;Part of the File Upload example — read it together with the lines before and after.
const dest = path.join(process.cwd(), 'public', 'uploads', safeName);Part of the File Upload example — read it together with the lines before and after.
await writeFile(dest, buffer);Part of the File Upload example — read it together with the lines before and after.
return { url: `/uploads/${safeName}` };Part of the File Upload example — read it together with the lines before and after.

How it works (big picture)

  • File from FormData is a Web File API object.
  • Size check blocks huge uploads.
  • Sanitize filename before save.
  • Production should use object storage, not public/uploads.

Do this on your computer

  1. Create form with enctype="multipart/form-data"
  2. input type="file" name="file"
  3. Server Action saves with size limit
  4. Plan move to S3 before production
  5. Read the real-world section and name which part of LearnHub uses this topic.
  6. Run the example locally with npm run dev and confirm the same behavior.
  7. Change one value in the example (route, text, or course id) and predict what will happen before you save.

Experiments — try changing this

  • Change a string or route in the example and save — watch the browser update.
  • Break the code on purpose (remove a bracket), read the error overlay, then fix it.
  • Change the API URL or course id and see how the page data changes.
  • Use npm run dev while editing File Upload — the page hot-reloads on save.

Remember

Validate size and type server-side. Use FormData File in Server Actions. Use cloud storage in production.

Common questions

Direct browser to S3?

Presigned URLs scale better for large files — learn after basics.

How long should I spend on File Upload?

Until you can explain it in your own words and run the example without looking at the answer. Beginners often need 30–60 minutes per new concept; setup lessons may take one afternoon.

What if I get stuck on File Upload?

Re-read the line-by-line walkthrough, check the terminal and browser overlay for errors, and compare your code character-by-character with the example. Search the exact error text — someone else had it too.

Where is File Upload used in real jobs?

See the real-world section above — the same pattern appears in LMS, e-commerce, SaaS, and dashboards. Interviewers ask you to explain it using one concrete example.

Next.js Tutorial
Course syllabus
Start Here Next.js Complete Beginner's Guide
Module 1: Next.js Foundations Introduction to Next.js — Complete Guide Installing Next.js — Complete Guide Understanding Project Structure — Complete Guide App Router Basics — Complete Guide Pages and Layouts — Complete Guide React Components in Next.js — Complete Guide Client Components — Complete Guide Server Components — Complete Guide Routing Fundamentals — Complete Guide Dynamic Routing — Complete Guide
Module 2: Layouts & Styling Nested Layouts — Complete Guide Navigation and Linking — Complete Guide Static Assets — Complete Guide CSS Modules — Complete Guide Tailwind CSS in Next.js — Complete Guide Data Fetching — Complete Guide Server Actions — Complete Guide Forms in Next.js — Complete Guide Form Validation — Complete Guide Authentication Basics — Complete Guide
Module 3: Data & Forms Middleware — Complete Guide API Route Handlers — Complete Guide Database Integration — Complete Guide File Upload — Complete Guide Image Optimization — Complete Guide Metadata and SEO — Complete Guide Performance Optimization — Complete Guide Deployment — Complete Guide E-Commerce App Project — Complete Guide SaaS Dashboard Project — Complete Guide
Module 4: Auth & APIs SSR vs SSG vs ISR — Complete Guide Streaming and Suspense — Complete Guide Loading and Error UI — Complete Guide Route Groups — Complete Guide Parallel Routes — Complete Guide Intercepting Routes — Complete Guide Edge Runtime — Complete Guide Caching in Next.js — Complete Guide Revalidating Data — Complete Guide TanStack Query in Next.js — Complete Guide
Module 5: SEO & Deploy NextAuth.js — Complete Guide Clerk Authentication — Complete Guide OAuth and Social Login — Complete Guide Protected Routes — Complete Guide Prisma ORM — Complete Guide MongoDB with Next.js — Complete Guide PostgreSQL with Next.js — Complete Guide Environment Variables — Complete Guide Unit Testing — Complete Guide Integration Testing — Complete Guide
Module 6: Advanced Routing Playwright E2E — Complete Guide CI/CD for Next.js — Complete Guide Internationalization — Complete Guide Accessibility — Complete Guide XSS and CSRF Protection — Complete Guide Security Headers — Complete Guide Rate Limiting — Complete Guide Structured Data — Complete Guide Sitemap and Robots — Complete Guide Zustand State — Complete Guide
Module 7: Auth & Database Redux Toolkit in Next.js — Complete Guide React Context Patterns — Complete Guide Monorepo with Turborepo — Complete Guide Docker for Next.js — Complete Guide Vercel Deployment — Complete Guide AWS Amplify — Complete Guide Azure Static Web Apps — Complete Guide Micro Frontends — Complete Guide Remix vs Next.js — Complete Guide Web Vitals Tuning — Complete Guide
Module 8: Quality & Security Font Optimization — Complete Guide Bundle Analysis — Complete Guide Blog Application Project — Complete Guide Student Portal Project — Complete Guide Job Portal Project — Complete Guide Hospital Portal Project — Complete Guide Food Delivery Frontend Project — Complete Guide Banking Dashboard Project — Complete Guide LMS Course Player Project — Complete Guide CRM Admin Project — Complete Guide
Module 9: Cloud & Scale Real-Time Chat Project — LearnHub Project Multi-Tenant SaaS Project — LearnHub Project Inventory Dashboard Project — LearnHub Project Travel Booking Project — LearnHub Project News Portal Project — LearnHub Project Portfolio Site Project — LearnHub Project Enterprise Architecture — LearnHub Project Clean Folder Structure — LearnHub Project API Design Patterns — LearnHub Project Error Handling Patterns — LearnHub Project
Module 10: Portfolio Projects Logging and Monitoring — LearnHub Project Stripe Payments — LearnHub Project Analytics and Observability — LearnHub Project Storybook with Next.js — LearnHub Project GraphQL with Next.js — LearnHub Project Content Security Policy — LearnHub Project Partial Prerendering — LearnHub Project Server Actions Security — LearnHub Project Production Checklist — LearnHub Project Next.js Career Roadmap — LearnHub Project
Toolliyo Assistant
Ask about tutorials, ebooks, training, pricing, mentor services, and support. I use public site content only—not admin or internal tools.

care@toolliyo.com

Need callback? Share your details