Brent • 4/10/2019

Unsafe SQL functions in Laravel

This technical article details a specific SQL injection vulnerability in Laravel's query builder, related to unsafe functions like `addSelect` and JSON column shorthand. It explains how unescaped user input can be exploited, provides a code example of the attack, and notes the issue was fixed in Laravel 5.8.11. The post serves as a security awareness guide for developers.

0 comments

#security #database #sql injection