Since you're already providing getters and setters, it's best to make this private. In this way (and by enforcing certain requirements when setting), you can later make some guarantees about the state of the $filename field.