Laravel 5.5 where() result is not expected

Question

Laravel 5.5 DB code:

DB::table('users')->where('company_id', 'ACB')->toSql()

I expect result as

SELECT * FROM `users` where `company_id` = `ACB`

But, I got following result;

select * from `users` where `company_id` = ?

What I did wrong ? Thanks

This syntax prevent to sql injection. But when you try DB::table('users')->where('company_id', 'ACB')->get() that case actual query is select * from users where company_id ='ACB' — Davit Zeynalyan
– Davit Zeynalyan, Commented Mar 4, 2019 at 19:20

Saromase · Accepted Answer · 2019-03-04 19:21:39Z

3

Nothing is wrong, the toSql() method, will only show you the query with binding params.

If you want to show bind, you need to use query->getBindings().

This is a security, to prevent SQL injection Databuilder use a prepared statement with question mark placeholders.

answered Mar 4, 2019 at 19:21

Saromase

4675 silver badges10 bronze badges

Sign up to request clarification or add additional context in comments.

1 Answer 1