Be part of JetBrains PHPverse 2026 on June 9 – a free online event bringing PHP devs worldwide together.
Hello,
In the Livewire documentation, there are examples using Livewire forms where you can pass the entire model to the form.
But given that there is a serialization that doesn't keep hidden fields hidden and so exposes all the fields, is it a good idea to pass the entire model or is it preferable to pass only the id and get the model instance via a query ?
If I'm right, shouldn't the documentation be updated with safer examples ?
Thanks for your answer ;).
V
Storing a model as a public property only sends the model's class (or morphable) name, primary key, and the same of any loaded relationships to/from the browser so this shouldn't be a problem.
I generally like to pass the ID and retrieve the model using a computed property. My response to a similar question goes more in-depth about this.
I would only pass the necessary information. I tend to use Resource for stripping/passing only necessary model information, and limiting database calls to only return the information needed.
I do not know how livewire works in this senario, but blade (in my understanding) only passes the information actually used. Inertia doesn't discriminate in the info it passes.
Maybe showing some age, but I do not like passing any information that is not actually needed. Back when we still had a majority on dial up and slow bandwidth services, payloads needed to be as slim as possible. I've kept that throughout the last 25 years and personally find it very bad practice to send unneeded information like full models if I only need an id or name property when possible.
Yes, if you are correct, docs should be updated!
Please or to participate in this conversation.