What does “Mass Assignment” mean in Laravel?

by

Mass assignment is when you send an array to the model creation, basically setting a bunch of fields on the model in a single go, rather than one by one, something like:

$user = new User(request()->all());

(This is instead of explicitly setting each value on the model separately.)

You can use fillable to protect which fields you want this to actually allow for updating.

You can also block all fields from being mass-assignable by doing this:

protected $guarded = ['*'];

Let’s say in your user table you have a field that is user_type and that can have values of user / admin

Obviously, you don’t want users to be able to update this value. In theory, if you used the above code, someone could inject into a form a new field for user_type and send ‘admin’ along with the other form data, and easily switch their account to an admin account… bad news.

By adding:

$fillable = ['name', 'password', 'email'];

You are ensuring that only those values can be updated using mass assignment

To be able to update the user_type value, you need to explicitly set it on the model and save it, like this:

$user->user_type="admin";
$user->save();

More Related Contents:

  1. Laravel one to many relation with a one to one relation
  2. Property Property Property [title] does not exist on this collection instance does not exist on this collection instance does not exist on this collection instance
  3. How to Create Multiple Where Clause Query Using Laravel Eloquent?
  4. Get the Last Inserted Id Using Laravel Eloquent
  5. How to do this in Laravel, subquery where in
  6. Laravel Eloquent Query Using WHERE with OR AND OR?
  7. How to insert multiple rows from a single query using eloquent/fluent
  8. Laravel – Eloquent or Fluent random row
  9. Add a custom attribute to a Laravel / Eloquent model on load?
  10. Creating and Update Laravel Eloquent
  11. How to sort a Laravel query builder result by multiple columns?
  12. How to alias a table in Laravel Eloquent queries (or using Query Builder)?
  13. Laravel Eloquent Sum of relation’s column
  14. Get the Query Executed in Laravel 3/4
  15. Laravel Checking If a Record Exists
  16. How to exclude certains columns while using eloquent
  17. How to alias the name of a column in Eloquent
  18. Laravel 5 hasMany relationship on two columns
  19. Laravel $q->where() between dates
  20. Laravel Recursive Relationships
  21. Laravel Eloquent – Attach vs Sync
  22. How to create a subquery using Laravel Eloquent?
  23. Update without touching timestamps (Laravel)
  24. laravel collection to array
  25. Eloquent Parent-Child relationship on same model
  26. Natural ORDER in Laravel Eloquent ORM
  27. How can I query raw via Eloquent?
  28. A __construct on an Eloquent Laravel Model
  29. How to get last insert id in Eloquent ORM laravel
  30. Eloquent groupBy make “SQLSTATE[42000]” with valid SQL query in Laravel 5.3

Leave a Comment