PHP 프레임워크 Laravel의 최신 SQL 주입 취약점에 대한 간략한 분석

Illuminate\Validation\Rule

Rule::unique('users')->ignore($id),

\Illuminate\Validation\Rules\Unique.php class Unique {
... public function ignore($id, $idColumn = null) { if ($id instanceof Model) { return $this->ignoreModel($id, $idColumn);
        } $this->ignore = $id; $this->idColumn = $idColumn ?? 'id'; return $this;
    }

$this->ignore = $id; $this->idColumn = 'id';

$id = $request->input('id');

Illuminate\Validation\Rules\Unique.php public function __toString() {
        ...
        ...
    }

Illuminate\Validation\Rules\Unique.php
V5.8.7【最新版】 public function __toString() { $this->ignore ? '"'.addslashes($this->ignore).'"' : 'NULL',
    } 
Illuminate\Validation\Rules\Unique.php
V5.8.4 public function __toString() { $this->ignore ? '"'.$this->ignore.'"' : 'NULL',
    }

Illuminate\Validation\Rules\DatabaseRule.php