Laravel Eloquent: Mass Assignment Protection

Protect your models from mass assignment vulnerabilities.

Secure mass assignment:

Fillable Array

php

protected $fillable = ['name', 'email', 'password'];

php

protected $guarded = ['id', 'is_admin'];

php

protected $guarded = ['*'];

php

$user->forceFill([
    'is_admin' => true,
])->save();

php

Model::unguard();
User::create($data);
Model::reguard();

Protect your models from mass assignment vulnerabilities.

Secure mass assignment:

php

protected $fillable = ['name', 'email', 'password'];

php

protected $guarded = ['id', 'is_admin'];

php

protected $guarded = ['*'];

php

$user->forceFill([
    'is_admin' => true,
])->save();

php

Model::unguard();
User::create($data);
Model::reguard();