Remi

Remi

Member Since 11 Months Ago

Experience Points 4,370
Experience Level 1

630 experience to go until the next level!

In case you were wondering, you earn Laracasts experience when you:

  • Complete a lesson — 100pts
  • Create a forum thread — 50pts
  • Reply to a thread — 10pts
  • Leave a reply that is liked — 50pts
  • Receive a "Best Reply" award — 500pts
Lessons Completed 43
Lessons
Completed
Best Reply Awards 0
Best Reply
Awards
  • start-engines Created with Sketch.

    Start Your Engines

    Earned once you have completed your first Laracasts lesson.

  • first-thousand Created with Sketch.

    First Thousand

    Earned once you have earned your first 1000 experience points.

  • 1-year Created with Sketch.

    One Year Member

    Earned when you have been with Laracasts for 1 year.

  • 2-years Created with Sketch.

    Two Year Member

    Earned when you have been with Laracasts for 2 years.

  • 3-years Created with Sketch.

    Three Year Member

    Earned when you have been with Laracasts for 3 years.

  • 4-years Created with Sketch.

    Four Year Member

    Earned when you have been with Laracasts for 4 years.

  • 5-years Created with Sketch.

    Five Year Member

    Earned when you have been with Laracasts for 5 years.

  • school-session Created with Sketch.

    School In Session

    Earned when at least one Laracasts series has been fully completed.

  • welcome-newcomer Created with Sketch.

    Welcome To The Community

    Earned after your first post on the Laracasts forum.

  • full-time-student Created with Sketch.

    Full Time Learner

    Earned once 100 Laracasts lessons have been completed.

  • pay-it-forward Created with Sketch.

    Pay It Forward

    Earned once you receive your first "Best Reply" award on the Laracasts forum.

  • subscriber-token Created with Sketch.

    Subscriber

    Earned if you are a paying Laracasts subscriber.

  • lifer-token Created with Sketch.

    Lifer

    Earned if you have a lifetime subscription to Laracasts.

  • lara-evanghelist Created with Sketch.

    Laracasts Evangelist

    Earned if you share a link to Laracasts on social media. Please email [email protected] with your username and post URL to be awarded this badge.

  • chatty-cathy Created with Sketch.

    Chatty Cathy

    Earned once you have achieved 500 forum replies.

  • lara-veteran Created with Sketch.

    Laracasts Veteran

    Earned once your experience points passes 100,000.

  • 10k-strong Created with Sketch.

    Ten Thousand Strong

    Earned once your experience points hits 10,000.

  • lara-master Created with Sketch.

    Laracasts Master

    Earned once 1000 Laracasts lessons have been completed.

  • laracasts-tutor Created with Sketch.

    Laracasts Tutor

    Earned once your "Best Reply" award count is 100 or more.

  • laracasts-sensei Created with Sketch.

    Laracasts Sensei

    Earned once your experience points passes 1 million.

  • top-50 Created with Sketch.

    Top 50

    Earned once your experience points ranks in the top 50 of all Laracasts users.

16 May
3 months ago

Remi left a reply on Using FormRequest Safely

@SHEZ1983 - Thanks for your answer, but I know how FormRequest works. The thing is there is no simple method to access the validated data, like input. In the case of an api with nested rules, I think this is missing.

Anyway, I simply created a macro with the same signature than input and It'll do the job.

Request::macro('safeInput', function ($key = null, $default = null) {
    return data_get($this->validated(), $key, $default);
});

What I'd really love would be a strict validation returning a validation error when unwanted fields (without matching rule) are present in the request. That way I'd know every piece of data coming from the request has been validated. Perhaps it already exists and I'm not aware of it ?

14 May
3 months ago

Remi left a reply on Using FormRequest Safely

@MTHOMAS - I believe array_get is gonna be deprecated in 5.9. In my code example I use data_get which does the same.

My point is that a request injected into a controller should be safe to work with. I don't want unexpected fields.

Remi started a new conversation Using FormRequest Safely

Hi there,


class MyController
{
    public function store(MyRequestForm $request, Model $myModel)
    {
        // What I Have to write
        $myModel->update(data_get($request->validated(), 'data.attributes.*'));

        // that's what I'd like to write but without modification it would be stupid as
        // additional field could be added to the request and avoid any validation
        $myModel->update($request->input('data.attributes.*'));
    }
}

When Injecting a FormRequest in a controller's method, I know I need to use the validated method to get what has been validated. However, when I use other methods like input, get or all, I'm not getting safe to use data.

I would like to be able to write $request->input('data.attributes.*') and being certain that it would be only validated fields.

Of course, I Could make a Custom FormRequest with custom input, get, all methods and inherit my requests from it, but I'd like not to do that way to avoid the risk of not inheriting a request from it and introducing a security problem.

Perhaps customising the FormRequestServiceProvider would be a way to go ?