Laravel's Select operations for searching databases-php Tutorial

{Code ...} on the page, a category id is sent to query and modify all products under the category according to this category id. This Category id is a set of strings. how do you write a query statement?

$ Data2 = DB: select ('select * from produce where stype_id = ". $ id ."');

A Category id is sent to the page.

Query and modify all products under the category based on the Category id

The category id is a string.

If there is a problem with this query, how can we write query statements?

Reply content:

$ Data2 = DB: select ('select * from produce where stype_id = ". $ id ."');

A Category id is sent to the page.

Query and modify all products under the category based on the Category id

The category id is a string.

If there is a problem with this query, how can we write query statements?

Php$ Data2 = DB: select ('select * from produce where stype_id in (". $ id. "'); // use Eloquent ORMproduce: whereIn ('stype _ id', [$ id]);

Will be injected by SQL, such as $ id = "1; drop table xxx ;"
Avoid Injection. the simplest thing is to use ORM to provide methods without directly writing SQL statements.

Do not use Eloquent ORM?