if you are not using raw queries such as
DB::raw()
you don't have to worry, if you are using something like
DB::table()->insert();
then you are safe :)
Thanks FerasAllaou,
I never came across raw() and I was implementing the backend connectivity through Eloquent. Could be briefly explain the disadvantages of such methods, also mention if many are so. Also conclude that through Laravel 5.1 can I achieve the secured web application.
using Eloquent is safe because Laravel does everything regarding the security, also in each Eloquent you can define the columns which could be edited and the ones which are not editable
protected $fillable = [
// editable columns goes here
];
otherwise if the column name is not listed, there is no way to insert data to it from the userside, it should be data from the system which you define it yourself ;)
Sign in to participate in this thread!
The Laravel portal for problem solving, knowledge sharing and community building.
The community