Laravel supports native SQL queries, but parameter binding should be preferred to ensure safety; 1. Use DB::select() to execute SELECT queries with parameter binding to prevent SQL injection; 2. Use DB::update() to perform UPDATE operations and return the number of rows affected; 3. Use DB::insert() to insert data; 4. Use DB::delete() to delete data; 5. Use DB::statement() to execute SQL statements without result sets such as CREATE, ALTER, etc.; 6. It is recommended to use whereRaw, selectRaw and other methods in Query Builder to combine native expressions to improve security; 7. Avoid using DB::unprepared() to process user input, and it is only used for trusted internal operations. In short, native SQL is available, but security must be guaranteed through parameter binding and a more secure Query Builder extension method is preferred.
In Laravel, while Eloquent ORM and the Query Builder are commonly used, there are times when you need to write raw SQL queries for complex operations or performance optimization. Laravel provides several ways to execute raw SQL safely and effectively.

Here's a practical example of using raw SQL in Laravel:
? Using DB::select()
for Raw SELECT Queries
use Illuminate\Support\Facades\DB; $users = DB::select('SELECT * FROM users WHERE age > ?', [18]);
- The first parameter is the raw SQL.
- The second is an array of bindings (to prevent SQL injection).
- Returns an array of
stdClass
objects.
? Note: Always use parameter binding (the
[18]
) instead of concatenating variables directly.
? Using DB::update()
for Raw UPDATE Queries
$affected = DB::update('UPDATE users SET votes = ? WHERE name = ?', [100, 'John']);
- Returns the number of affected rows.
? Using DB::insert()
for Raw INSERT Queries
DB::insert('INSERT INTO users (name, email, age) VALUES (?, ?, ?)', [ 'Jane Doe', 'jane@example.com', 25 ]);
? Using DB::delete()
for Raw DELETE Queries
$deleted = DB::delete('DELETE FROM users WHERE age < ?', [18]);
? Using DB::statement()
for Schema or Non-Select Queries
Use this for raw SQL that doesn't return results (eg, CREATE
, ALTER
, DROP
):
DB::statement('CREATE TABLE IF NOT EXISTS temp_users (id INT AUTO_INCREMENT PRIMARY KEY, name VARCHAR(255))');
? Using Raw Expressions in Query Builder (Safer Alternative)
Instead of full raw queries, you can inject raw expressions where needed:

$users = DB::table('users') ->whereRaw('age > ? AND status = ?', [18, 'active']) ->selectRaw('id, name, updated_at, (age * 2) as doubled_age') ->get();
Or order by a raw expression:
->orderByRaw('name ASC, created_at DESC')
? Using DB::unprepared()
(Not Recommended)
This runs raw SQL without any binding — dangerous if user input is involved .
DB::unprepared('DROP TABLE users_backup');
?? Only use for trusted internal operations (eg, migrations, setup scripts).
Summary of Common Methods
Method | Use Case |
---|---|
DB::select()
|
Raw SELECT queries |
DB::update()
|
Raw UPDATE queries |
DB::insert()
|
Raw INSERT queries |
DB::delete()
|
Raw DELETE queries |
DB::statement()
|
Schema or DDL queries |
DB::unprepared()
|
Unsafe — avoid with dynamic input |
If you're working inside Eloquent models or need more flexibility, consider using raw expressions ( whereRaw
, selectRaw
, etc.) instead of full raw queries — they're safer and integrate better with Laravel's ecosystem.
Basically, raw SQL is supported, but always prioritize parameter binding and avoid unprepared
with user data.
The above is the detailed content of Laravel raw SQL query example. For more information, please follow other related articles on the PHP Chinese website!

Hot AI Tools

Undress AI Tool
Undress images for free

Undresser.AI Undress
AI-powered app for creating realistic nude photos

AI Clothes Remover
Online AI tool for removing clothes from photos.

Clothoff.io
AI clothes remover

Video Face Swap
Swap faces in any video effortlessly with our completely free AI face swap tool!

Hot Article

Hot Tools

Notepad++7.3.1
Easy-to-use and free code editor

SublimeText3 Chinese version
Chinese version, very easy to use

Zend Studio 13.0.1
Powerful PHP integrated development environment

Dreamweaver CS6
Visual web development tools

SublimeText3 Mac version
God-level code editing software (SublimeText3)

Hot Topics

Lazy loading only queries when accessing associations can easily lead to N 1 problems, which is suitable for scenarios where the associated data is not determined whether it is needed; 2. Emergency loading uses with() to load associated data in advance to avoid N 1 queries, which is suitable for batch processing scenarios; 3. Emergency loading should be used to optimize performance, and N 1 problems can be detected through tools such as LaravelDebugbar, and the $with attribute of the model is carefully used to avoid unnecessary performance overhead.

UseaRESTAPItobridgePHPandMLmodelsbyrunningthemodelinPythonviaFlaskorFastAPIandcallingitfromPHPusingcURLorGuzzle.2.RunPythonscriptsdirectlyfromPHPusingexec()orshell_exec()forsimple,low-trafficusecases,thoughthisapproachhassecurityandperformancelimitat

Laravel supports the use of native SQL queries, but parameter binding should be preferred to ensure safety; 1. Use DB::select() to execute SELECT queries with parameter binding to prevent SQL injection; 2. Use DB::update() to perform UPDATE operations and return the number of rows affected; 3. Use DB::insert() to insert data; 4. Use DB::delete() to delete data; 5. Use DB::statement() to execute SQL statements without result sets such as CREATE, ALTER, etc.; 6. It is recommended to use whereRaw, selectRaw and other methods in QueryBuilder to combine native expressions to improve security

Responsive programming implements high concurrency, low latency non-blocking services in Java through ProjectReactor and SpringWebFlux. 1. ProjectReactor provides two core types: Mono and Flux, supports declarative processing of asynchronous data flows, and converts, filters and other operations through operator chains; 2. SpringWebFlux is built on Reactor, supports two programming models: annotation and functional. It runs on non-blocking servers such as Netty, and can efficiently handle a large number of concurrent connections; 3. Using WebFlux Reactor can improve the concurrency capability and resource utilization in I/O-intensive scenarios, and naturally supports SSE and WebSo.

MapStruct is a compile-time code generator used to simplify mapping between JavaBeans. 1. It automatically generates implementation classes by defining interfaces to avoid manually writing lengthy set/get mapping code; 2. It has type-safe, no runtime overhead, supports automatic mapping of the same name fields, custom expressions, nested objects and collection mapping; 3. It can be integrated with Spring and uses @Mapper(componentModel="spring") to inject mapper into Springbean; 4. Simple configuration, just introduce mapstruct dependencies and annotationProcessorPaths inserts

Use regular expression capture group in Notepad to effectively reorganize text. First, you need to open the replacement dialog box (Ctrl H), select "Search Mode" as "regular expression", 1. Use () to define the capture group, such as (\w ) to capture words; 2. Use \1 and \2 to reference the corresponding group in the replacement box; 3. Example: Exchange the name "JohnDoe" as "Doe, John", find (\w )\s (\w ), replace it with \2,\1; 4. Date format conversion 2023-12-25 to 25/12/2023, find (\d{4})-(\d{2})-(\d{2}), replace it with \3/\2/\1; 5. Log reordering can extract time, level, ID and other information

UseefficientdatastructureslikeArrayListoverLinkedListandprimitivecollectionstoreduceoverhead;2.Minimizeobjectcreationbyreusingobjects,usingStringBuilderforconcatenation,andcachingexpensiveobjects;3.Preventmemoryleaksbynullifyingreferences,usingstatic

Python's ternary operator is used to concisely implement if-else judgment, and its syntax is "value_if_trueif conditionelsevalue_if_false"; 1. It can be used for simple assignment, such as returning the corresponding string based on positive and negative values; 2. It can avoid division errors, such as determining that the denominator is non-zero and then division; 3. It can select content according to conditions in string format; 4. It can assign labels to different elements in list derivation formula; it should be noted that this operator is only suitable for binary branches and should not be nested multiple layers. Complex logic should use the traditional if-elif-else structure to ensure readability.
