Form Requests وحدود المدخل الموثوق

<?php
namespace App\Http\Requests;
use App\Models\Post;
use Illuminate\Foundation\Http\FormRequest;
class StorePostRequest extends FormRequest
{
    public function authorize(): bool
    {
        return $this->user()?->can("create", Post::class) ?? false;
    }
    public function rules(): array
    {
        return [
            "title" => ["required", "string", "max:120"],
            "body" => ["required", "string", "max:5000"],
        ];
    }
}

Authorized JSON request with missing title: validation response 422 with a title error.

يجب أن تسمح السياسة المسجلة بالإنشاء ويتكون عقد الكتابة من العنوان والجسم المحدودين.

<?php
namespace App\Http\Controllers;
use App\Http\Requests\StorePostRequest;
use Illuminate\Http\RedirectResponse;
class PostController extends Controller
{
    public function store(StorePostRequest $request): RedirectResponse
    {
        $data = $request->validated();
        $post = $request->user()->posts()->create([
            "title" => $data["title"],
            "body" => $data["body"],
            "published" => false,
        ]);
        return redirect()->route("posts.show", $post);
    }
}

On a successful isolated insert: author is the authenticated user, published is false, then redirect to posts.show.

تحدد العلاقة المؤلف ويثبت الخادم النشر ويتطلب المسار، وهو مقطع لا كتابة منفذة.