jeudi 19 mars 2020

Laravel model: INSERT/UPDATE with DB::raw to CONCAT values

I was trying to save a data with DB::raw of mysql CONCAT function, but I was stucked and keeps failing on saving once the case if the input is special characters I guess. bellow is my code.

$sample_input = `from mobile$#@@hggg$_-++?!;:hh:'"#1f`;
$histCon  = 'CONCAT(history, "'.$sample_input.'" Updated  from [E] on 2020-03-19 20:09:50 by: nix")';

$model = ModelTable::query()->where('encounter_nr', $enc_no)->first();
$model->final_diag = $soap['final_diag']['value'];
$model->other_diag = $soap['other_diag']['value'];
$model->modify_date = Carbon::now()->toDateTimeString();
$model->modify_id = $personelUsername;
$model->history = DB::raw($histCon);
$res = $model->save(); 

but I keep getting this error

"SQLSTATE[42000]: Syntax error or access violation: 1064 You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '") where `encounter_nr` = ?' at line 2 (SQL: update `modelTable` set `final_diagnosis` = from mobile$#@@hggg$_-++?!;:hh:'"#1f, `modify_date` = 2020-03-19 20:09:50, `history` = CONCAT(history, "Final Diagnosis: from mobile$#@@hggg$_-++?!;:hh:'"#1f Updated  from [E] on 2020-03-19 20:09:50 by: nix ↵") where `encounter_nr` = ?)"

I guess the issue is in the DB::raw values since it contains with special characters, so how should implement safe values DB::raw queries applied with update/insert transactions?



via Chebli Mohamed

Aucun commentaire:

Enregistrer un commentaire