lundi 25 septembre 2017

Raw Query inside query builder can secure for sql injection using laravel query builder?

I would like to know when we use raw query inside query builder in laravel query builer as the following.

   $salesdata = DB::table('HEADER')
                ->join('BRANCH', 'HEADER.BRANCHCODE', '=', 'BRANCH.BRANCHCODE')
                ->select('HEADER.BRANCHCODE','BRANCH.BRANCHNAME',
                    DB::raw('SUM("HEADER"."AMT") as netamt'),
                    DB::raw('SUM("HEADER"."AMT") + SUM("HEADER"."DISCOUNT")- SUM("HEADER"."TAX1")- SUM("T_CASH_HEADER"."TAX2") as grossamt'),'BRANCH.BRANCHNAME',
                    DB::raw('SUM("HEADER"."COVER") as NetCover'),
                    DB::raw('SUM("HEADER"."DISCOUNT") as discount'),DB::raw('SUM("HEADER"."TAX1") as tax'),DB::raw('round(SUM("HEADER"."AMT")/SUM("HEADER"."COVER"),2) as avg'))
                ->whereBetween('HEADER.INVOICEDATE', [$fromDate, $toDate])
                ->groupBy('BRANCH.BRANCHCODE','BRANCH.BRANCHNAME','HEADER.BRANCHCODE')
                ->orderBy('AMT','ASC')
                ->get();

I would like to know above query can sure for sql injection using laravel.



from Newest questions tagged laravel-5 - Stack Overflow http://ift.tt/2yBgfKf
via IFTTT

Aucun commentaire:

Enregistrer un commentaire