Create Comment model and migration and run migration; 2. Define corresponding relationships in Post, User and Comment models; 3. Add a comment form on the article details page; 4. Create CommentController and process comment submissions in the store method; 5. Register a comment submission route with authenticated middleware in the route; 6. Display all comments of the article on the page; 7. Optional enhancements include nested reply, Markdown support, anti-spam, auditing and real-time updates; 8. Pay attention to input filtering, CSRF protection and permission control to ensure system security. This comment system is implemented based on Laravel convention, supports authenticated users to post comments and is scalable.

Adding a comment system to a blog in Laravel is straightforward if you follow Laravel's conventions for models, relationships, and form handling. Below is a step-by-step guide to implement a basic but functional comment system.

1. Set Up the Comment Model and Migration

First, generate the model and migration for comments:

 php artisan make:model Comment -m

In the generated migration file (eg, create_comments_table.php ), define the necessary fields:

 Schema::create('comments', function (Blueprint $table) {
    $table->id();
    $table->foreignId('post_id')->constrained()->onDelete('cascade');
    $table->foreignId('user_id')->constrained()->onDelete('cascade');
    $table->text('body');
    $table->timestamps();
});

Run the migration:

 php artisan migrate

2. Define Relationships in Models

In your Post model ( app/Models/Post.php ):

 public function comments()
{
    return $this->hasMany(Comment::class);
}

In your User model ( app/Models/User.php ), if not already present:

 public function comments()
{
    return $this->hasMany(Comment::class);
}

And in your Comment model ( app/Models/Comment.php ):

 public function post()
{
    return $this->belongsTo(Post::class);
}

public function user()
{
    return $this->belongsTo(User::class);
}

3. Create a Comment Form in the Post View

In your post show view (eg, resources/views/posts/show.blade.php ), add a form for submitting comments:

 <div>
    <h3>Leave a Comment</h3>
    <form action="{{ route(&#39;comments.store&#39;, $post) }}" method="POST">
        @csrf
        <textarea name="body" rows="4" class="w-full border rounded p-2" placeholder="Write your comment..." required></textarea>
        <button type="submit" class="mt-2 bg-blue-500 text-white px-4 py-2 rounded">Submit</button>
    </form>
</div>

4. Create a Comment Controller

Generate a controller:

 php artisan make:controller CommentController

In app/Http/Controllers/CommentController.php :

 use App\Models\Comment;
use App\Models\Post;
use Illuminate\Http\Request;

public function store(Request $request, Post $post)
{
    $request->validate([
        'body' => 'required|string|max:1000',
    ]);

    $post->comments()->create([
        'body' => $request->body,
        'user_id' => auth()->id(),
    ]);

    return back()->with('success', 'Comment added successfully.');
}

Register the route in routes/web.php :

 use App\Http\Controllers\CommentController;

Route::middleware(['auth'])->group(function () {
    Route::post('/posts/{post}/comments', [CommentController::class, 'store'])->name('comments.store');
});

Note: Only authenticated users can comment. You can adjust middleware as needed.

5. Display Comments on the Post Page

Below the comment form, loop through and display existing comments:

 <div class="mt-6">
    <h3>Comments ({{ $post->comments->count() }})</h3>
    @foreach ($post->comments as $comment)
        <div class="border-b py-3">
            <p class="font-semibold">{{ $comment->user->name }}</p>
            <p class="text-gray-700">{{ $comment->body }}</p>
            <small class="text-gray-500">{{ $comment->created_at->format(&#39;M d, Y \a\tg:i A&#39;) }}</small>
        </div>
    @endforeach
</div>

6. Optional Enhancements

You can improve the system with:

• Nested replies : Add a parent_id field to support threaded comments.
• Markdown support : Use a package like parsedown to render markdown in comments.
• Spam protection : Add reCAPTCHA or rate limiting.
• Comment moderation : Add an is_approved column and scope comments.
• Real-time updates : Use Laravel Echo and WebSockets with Pusher.

7. Security & Validation Tips

• Always sanitize user input.
• Use Laravel's built-in CSRF protection (already in the form).
• Consider using policies if you want to allow editing/deleting comments.

For example, to let users delete their own comments:

 // In CommentController
public function destroy(Comment $comment)
{
    $this->authorize('delete', $comment);
    $comment->delete();
    return back()->with('success', 'Comment deleted.');
}

And define a policy:

 php artisan make:policy CommentPolicy --model=Comment

That's it. You now have a working comment system. It's secure, integrates with Laravel's auth, and scales well for basic blogs. You can expand from here based on your needs.

The above is the detailed content of How to implement a comment system for a blog in Laravel?. For more information, please follow other related articles on the PHP Chinese website!