Laravel Eloquent: Mass Assignment Protection

Secure mass assignment:

Fillable Array

protected $fillable = ['name', 'email', 'password'];

Guarded Array

protected $guarded = ['id', 'is_admin'];

Guard All

protected $guarded = ['*'];

Force Fill

$user->forceFill([
    'is_admin' => true,
])->save();

Unguard Temporarily

Model::unguard();
User::create($data);
Model::reguard();