It is safe in this perspective (i.e from the HTML). The view is never outputing a single line besides what you write in it.
You can, and should, though put the password in the $hidden parameter which will hide when casting to array or json - i.e returning it from a Route or casting to string which you could do from time to time by accident. From the documentation:
class User extends Eloquent {
protected $hidden = array('password');
}
Hidden was what I was looking for. Thanks.
Sign in to participate in this thread!
The Laravel portal for problem solving, knowledge sharing and community building.
The community