Laravel model: INSERT/UPDATE with DB::raw to CONCAT values

I was trying to save a data with DB::raw of mysql CONCAT function, but I was stucked and keeps failing on saving once the case if the input is special characters I guess. bellow is my code.

$sample_input = `from mobile$#@@hggg$_-++?!;:hh:'"#1f`;
$histCon  = 'CONCAT(history, "'.$sample_input.'" Updated  from [E] on 2020-03-19 20:09:50 by: nix")';

$model = ModelTable::query()->where('encounter_nr', $enc_no)->first();
$model->final_diag = $soap['final_diag']['value'];
$model->other_diag = $soap['other_diag']['value'];
$model->modify_date = Carbon::now()->toDateTimeString();
$model->modify_id = $personelUsername;
$model->history = DB::raw($histCon);
$res = $model->save(); 

but I keep getting this error

"SQLSTATE[42000]: Syntax error or access violation: 1064 You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '") where `encounter_nr` = ?' at line 2 (SQL: update `modelTable` set `final_diagnosis` = from mobile$#@@hggg$_-++?!;:hh:'"#1f, `modify_date` = 2020-03-19 20:09:50, `history` = CONCAT(history, "Final Diagnosis: from mobile$#@@hggg$_-++?!;:hh:'"#1f Updated  from [E] on 2020-03-19 20:09:50 by: nix ↵") where `encounter_nr` = ?)"

As you can see in the error message, where the whole query where suppose to be in parameterized form.

I guess the issue is in the DB::raw, since its value contains with special characters, and causes bug on the entire eloquent builder, so how should implement safe values DB::raw queries applied with update/insert transactions?

from Newest questions tagged laravel-5 - Stack Overflow https://ift.tt/2wde9UV
via IFTTT