Eloquent automatically prevent SQL Injection so you dont need it. For XSS prevent use e() function which escape string.
$user->bio = e(Input::get("bio"));
Sign in to participate in this thread!
The Laravel portal for problem solving, knowledge sharing and community building.
The community