hi, i need to do this query:
SELECT avg(vote) FROM (SELECT max(timestamp), vote FROM votes_table WHERE object = $id GROUP BY user)
i don't want to do this DB::raw(SELECT max(timestamp), vote FROM votes_table WHERE object = $id GROUP BY user) because it can be make some SQLInjection problem someone has a solution?
Last updated
2 years ago.
It can only be injected if you allow $id to be set from outside the environment, and if that is the case just sanitize the input.
I wouldn't worry about any injections with that query.
Last updated
2 years ago.
Sign in to participate in this thread!
Laravel
Laravel News
Laracasts
Laravel Podcast