ArielMejiaDev

Security in Laravel: How to Protect Your App

Code Injections

SQL Injections

User::query()->create($request->all());

ArielMejiaDev

<?php 
public function replicateWithRelations(QuestionCategory $questioncategory)
    {
        $newCategory = $questioncategory->replicate();
        $newCategory->name = "Kopyası: ".$questioncategory->name;
        $newCategory->push();

        $questioncategory->relations = [];

        //load relations on EXISTING MODEL

ArielMejiaDev

resourceToArray snippet

Use to transform a resource to an associative array:

abstract class TestCase extends BaseTestCase
{

    //...

ArielMejiaDev

TestResponse snippet

On the app service provider boot method or in any custom provider:

/**
 * Assert that the json response match exactly with a given resource.
 * @return \Illuminate\Testing\TestResponse
 * @instantiated

ArielMejiaDev

name: Laravel

on:
  push:
    branches: [ main ]
  pull_request:
    branches: [ main ]

jobs:
  laravel-tests:

ArielMejiaDev

name: Tests (PHP)

on: [push]

jobs:
  tests:
    name: Run tests
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v1

ArielMejiaDev

before_script:
  - echo 'Before script'
  - 'which ssh-agent || ( apt-get update -y && apt-get install openssh-client -y )'
  - eval $(ssh-agent -s)
  - mkdir -p ~/.ssh
  - echo "$SSH_PRIVATE_KEY" | tr -d '\r' | ssh-add -
  - chmod 700 ~/.ssh
  - ssh-keyscan -H 'domain.com' >> ~/.ssh/known_hosts
  - chmod 644 ~/.ssh/known_hosts
building:

ArielMejiaDev

Usage

Put SearchTrait.php in app directory. Then use SearchTrait in your model, like so

use App\SearchTrait;
use Illuminate\Database\Eloquent\Model;

class Article extends Model {

ArielMejiaDev

<?php

namespace App\Http\Resources;

use Illuminate\Http\Resources\Json\ResourceCollection;
use Illuminate\Pagination\UrlWindow;
use Illuminate\Support\Arr;
use Barryvdh\Debugbar\Facade as DebugbarFacade;
use Illuminate\Container\Container;
use Illuminate\Contracts\Pagination\LengthAwarePaginator as LengthAwarePaginatorContract;

ArielMejiaDev

    Route::get('/', function (\Illuminate\Http\Request $request) {

        $initialSearch = $request->query('search', '');

        $userQuery = User::query()
        ->when($request->filled('search'),function($query) use ($initialSearch){
            $query->where('name','LIKE','%'.$initialSearch.'%')
            ->orWhere('email','LIKE','%'.$initialSearch.'%');
        });