Laravel 5: when persist form data, _token causes mass assignment exception

Question

When I try to persist form data, Laravel is throwing a mass assignment exception.

In the view I'm using {!! form::open(...) !!} which I know creates _token as a hidden field.

When the form data is sent to the controller, I'm using

$data = Input::all();
$order = Order::create($data);
$order->save();

Should I be adding a field for _token in my database? Or am I causing an error by doing something else wrong?

Answer 1

A mass assignment exception is usually caused because you didn't specify the fillable (or guarded the opposite) attributes in your model. Do this:

class Order extends Eloquent {
    protected $fillable = ['field1', 'foo', 'bar'];
}

This way you also don't have to worry about _token because only the specified fields will be filled and saved in the db no matter what other stuff you pass to the model.

Answer 2

or

protected $guarded = array();