Raw expressions in Laravel - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is a raw expression in Laravel's query builder?

A raw expression lets you write plain SQL inside Laravel's query builder. It tells Laravel not to escape or modify the SQL part you write.

beginner

How do you create a raw expression in Laravel?

Use the DB::raw() method. For example: DB::raw('COUNT(*)') creates a raw SQL expression for counting rows.

intermediate

Why should you be careful when using raw expressions?

Raw expressions bypass Laravel's protection against SQL injection. You must ensure the raw SQL is safe and does not include user input directly.

beginner

Example: How to select users with a raw SQL condition for age > 30?

Use: User::whereRaw('age > 30')->get(); This runs the raw SQL condition inside the query.

intermediate

Can you use raw expressions in select statements?

Yes! For example: User::select(DB::raw('COUNT(*) as user_count'))->get(); This counts users using raw SQL inside select.

What does DB::raw() do in Laravel?

A Automatically escapes SQL inputs

B Validates user input

C Creates a new database connection

D Allows writing plain SQL inside query builder

DB::raw() lets you write raw SQL expressions that Laravel will not modify or escape.

Which method uses raw SQL conditions in Laravel queries?

A whereRaw()

B whereSafe()

C whereClean()

D whereSecure()

whereRaw() allows you to add raw SQL conditions to your query.

Why is it risky to use raw expressions with user input?

A It slows down the query

B It can cause SQL injection if not handled properly

C It automatically deletes data

D It disables database connections

Raw expressions bypass Laravel's protections, so unsafe user input can lead to SQL injection.

How do you count rows using raw expressions in Laravel?

A select(DB::raw('COUNT(*) as count'))

B countRaw()

C count()

D rawCount()

You use select(DB::raw('COUNT(*) as count')) to count rows with raw SQL.

Which of these is NOT a use of raw expressions?

A Writing custom SQL functions

B Bypassing query builder protections

C Automatically escaping user input

D Adding complex SQL conditions

Raw expressions do NOT automatically escape user input; they bypass protections.

Explain what raw expressions are in Laravel and when you might use them.

Think about how Laravel lets you write plain SQL inside its query builder.

Describe how to safely use raw expressions in Laravel queries.

Focus on security best practices when mixing raw SQL with user data.