It can only be injected if you allow $id to be set from outside the environment, and if that is the case just sanitize the input.
I wouldn't worry about any injections with that query.
Sign in to participate in this thread!
The Laravel portal for problem solving, knowledge sharing and community building.
The community