Level 15
As long as you're not using DB::raw(), you're fine. Eloquent sanitizes the queries by default.
1 like
Apr 29, 2022
5
Level 1
Are we have to sanitize our request when we use request in LIKE eloquent query?
Are we have to sanitize our request when we use request in LIKE eloquent query? if we have to sanitize it what are the best practices?
Level 1
@undeportedmexican thanks fo the answer my guy
Level 1
@undeportedmexican hey i just wanna confirmed something, by default that's mean eloquent already prevent SQL injection right?
Level 75
@azizikri can you give an example query?
Level 1
@jlrdw sorry for the late response, this is the eloquent code
$query->when($filters['query'] ?? false, fn($query) => $query->where('title', 'LIKE', "%{$filters['query']}%") ->orWhere('description', 'LIKE', "%{$filters['query']}%"));
Please or to participate in this conversation.