爲什麼我不能使用Laravel將包含用戶ID字段的帖子保存到數據庫中？

Question

我正在使用Laravel 5管理風格的應用程序，該應用程序具有登錄/註銷功能以及供用戶創建自己帖子的工具（在本例中它們被稱爲「預訂」）。我希望每個用戶都能夠創建他們自己的預訂，這些預訂對他們來說是唯一的，即只有用他們的用戶名和密碼登錄後才能看到。爲了達到這個目的，我在'預訂'表（它存儲了所有預訂）中爲user_id創建了一列。當登錄用戶創建預訂時，我希望他/她自己的用戶標識存儲在user_id列中。所以此刻，我將user_id（使用auth（） - > user（）確定）作爲路由（url）中的附加參數傳遞給「bookings.store」函數。但是，我一直收到以下消息：「提交表單時沒有[型號[App \ Booking]型號的查詢結果」，而是被重定向回到預訂頁面，新預訂保存爲預期。

下面是我的一些代碼：// BookingsController.php：

<?php 

namespace App\Http\Controllers; 

use App\Http\Requests; 
use App\Http\Controllers\Controller; 
use Illuminate\Support\Facades\Redirect; 

use Illuminate\Http\Request; 

use View; 

use App\Model; 

use App\User; 

use App\Booking; 

use App\BookingItem; 

use App\Http\Controllers\Validator; 

use Input; 

class BookingsController extends Controller 
{ 

    /** 
    * Display a listing of the resource. 
    * 
    * @return \Illuminate\Http\Response 
    */ 
    public function index() 
    { 
     $bookings = \App\Booking::all(); 
     return View::make('bookings.index')->with('bookings', $bookings); 
      // $user = auth()->user()->id; 
      // $bookings = auth()->user()->bookings()->get(); 
      // return view('bookings.index')->with('bookings', $bookings); 

    } 

    /** 
    * Show the form for creating a new resource. 
    * 
    * @return \Illuminate\Http\Response 
    */ 
    public function create() 
    { 
     $user = auth()->user(); 
     return View::make('bookings.create')->with('user', $user); 
    } 

    /** 
    * Store a newly created resource in storage. 
    * 
    * @param \Illuminate\Http\Request $request 
    * @return \Illuminate\Http\Response 
    */ 
    public function store(Request $request, $user_id) 
    { 
     // define rules 
     $rules = [ 
      'name' => 'between:2,255', 
     ]; 

     $this->validate($request, [ 
      'name' => 'required|unique:bookings|max:255', 
     ]); 


     $name = $request->get('name'); 
     $description = $request->get('description'); 
     $booking->name = $name; 
     $booking->user_id = $user_id; 
     $booking->description = $description; 
     $booking->save(); 
     return Redirect::route('bookings.index')->withMessage('Booking Was Created'); 
    } 

    /** 
    * Display the specified resource. 
    * 
    * @param int $id 
    * @return \Illuminate\Http\Response 
    */ 
    public function show($id) 
    { 
     $booking = \App\Booking::findorFail($id); 
     $items = $booking->BookingItems()->get();   
     return View::make('bookings.show') 
     ->withBooking($booking) // will allow us to see our bookings, by id. 
     ->withItems($items); 

    } 
} 

?> 

// Create.blade.php

@extends('layouts.main') 
@section('content') 
<div class="container"> 
    <div class="row"> 
     <div class="small-6 columns"> 
      <div class="panel panel-default"> 
       <div class="panel-heading"><h2>Add a new booking</h2></div> 
       <div class="panel-body"> 
        {{ var_dump($user->id) }} 
        <form class="form-horizontal" role="form" method="POST" action="{{ route('bookings.store', $user->id) }}"> 
         <input name="_method" type="hidden" value="PUT"> 
         {!! csrf_field() !!} 
         @include('bookings.partials._form'); 
         <div class="form-group"> 
          <div class="col-md-6 col-md-offset-4"> 
           <button type="submit" class="btn btn-primary"> 
            <i class="fa fa-btn fa-briefcase"></i>Add Booking 
           </button> 
          </div> 
         </div> 
        </form> 
       </div> 
      </div> 
     </div> 
    </div> 
</div> 

@stop 

// web.php（我的路線）

Route::get('/', 'BookingsController@index'); 
    Route::resource('bookings', 'BookingsController'); 
    Route::resource('bookings.items', 'BookingItemController', ['except' => ['index', 'show']]); 
    Route::resource('agents', 'UsersController'); 
    Route::get('/bookings/{bookings}/items/{items}/complete', ['as' => 'bookings.items.complete', 'uses' => 'BookingItemController@complete']); 
    Auth::routes(); 

Route::get('/home', 'HomeController@index'); 
Route::get('/logout', function(){ 
    Auth::logout(); 
    return Redirect::route('bookings.index')->withErrors('You Are Logged Out!'); 
}); 
Route::post('/bookings/{id}', ['uses' => 'BookingsController@store', 'as' => 'bookings.store']); 

我的預訂表包含以下列：

ID（PK） USER_ID（FK） 名 描述 created_at 的updated_at

如果任何人有任何建議或可以幫助，那將是巨大的。目前，我認爲這可能是對演出路線的違約。

問候，

羅伯特 倫敦，英國

當前路線：

+--------+-----------+--------------------------------------------+-------------------------+------------------------------------------------------------------------+--------------+ 
| Domain | Method | URI          | Name     | Action                 | Middleware | 
+--------+-----------+--------------------------------------------+-------------------------+------------------------------------------------------------------------+--------------+ 
|  | GET|HEAD |/          |       | App\Http\Controllers\BookingsController@index       | web   | 
|  | GET|HEAD | agents          | agents.index   | App\Http\Controllers\UsersController@index        | web   | 
|  | POST  | agents          | agents.store   | App\Http\Controllers\UsersController@store        | web   | 
|  | GET|HEAD | agents/create        | agents.create   | App\Http\Controllers\UsersController@create       | web   | 
|  | GET|HEAD | agents/{agent}        | agents.show    | App\Http\Controllers\UsersController@show        | web   | 
|  | DELETE | agents/{agent}        | agents.destroy   | App\Http\Controllers\UsersController@destroy       | web   | 
|  | PUT|PATCH | agents/{agent}        | agents.update   | App\Http\Controllers\UsersController@update       | web   | 
|  | GET|HEAD | agents/{agent}/edit      | agents.edit    | App\Http\Controllers\UsersController@edit        | web   | 
|  | GET|HEAD | api/user         |       | Closure                | api,auth:api | 
|  | POST  | bookings         | bookings.store   | App\Http\Controllers\BookingsController@store       | web   | 
|  | GET|HEAD | bookings         | bookings.index   | App\Http\Controllers\BookingsController@index       | web   | 
|  | GET|HEAD | bookings/create       | bookings.create   | App\Http\Controllers\BookingsController@create       | web   | 
|  | GET|HEAD | bookings/{bookings}/items/{items}/complete | bookings.items.complete | App\Http\Controllers\BookingItemController@complete     | web   | 
|  | DELETE | bookings/{booking}       | bookings.destroy  | App\Http\Controllers\BookingsController@destroy      | web   | 
|  | PUT|PATCH | bookings/{booking}       | bookings.update   | App\Http\Controllers\BookingsController@update       | web   | 
|  | GET|HEAD | bookings/{booking}       | bookings.show   | App\Http\Controllers\BookingsController@show       | web   | 
|  | GET|HEAD | bookings/{booking}/edit     | bookings.edit   | App\Http\Controllers\BookingsController@edit       | web   | 
|  | POST  | bookings/{booking}/items     | bookings.items.store | App\Http\Controllers\BookingItemController@store      | web   | 
|  | GET|HEAD | bookings/{booking}/items/create   | bookings.items.create | App\Http\Controllers\BookingItemController@create      | web   | 
|  | DELETE | bookings/{booking}/items/{item}   | bookings.items.destroy | App\Http\Controllers\BookingItemController@destroy      | web   | 
|  | PUT|PATCH | bookings/{booking}/items/{item}   | bookings.items.update | App\Http\Controllers\BookingItemController@update      | web   | 
|  | GET|HEAD | bookings/{booking}/items/{item}/edit  | bookings.items.edit  | App\Http\Controllers\BookingItemController@edit      | web   | 
|  | POST  | bookings/{id}        | bookings.store   | App\Http\Controllers\BookingsController@store       | web   | 
|  | GET|HEAD | home          |       | App\Http\Controllers\HomeController@index        | web,auth  | 
|  | GET|HEAD | login          | login     | App\Http\Controllers\Auth\LoginController@showLoginForm    | web,guest | 
|  | POST  | login          |       | App\Http\Controllers\Auth\LoginController@login      | web,guest | 
|  | POST  | logout          |       | App\Http\Controllers\Auth\LoginController@logout      | web   | 
|  | GET|HEAD | logout          |       | Closure                | web   | 
|  | POST  | password/email        |       | App\Http\Controllers\Auth\ForgotPasswordController@sendResetLinkEmail | web,guest | 
|  | GET|HEAD | password/reset        |       | App\Http\Controllers\Auth\ForgotPasswordController@showLinkRequestForm | web,guest | 
|  | POST  | password/reset        |       | App\Http\Controllers\Auth\ResetPasswordController@reset    | web,guest | 
|  | GET|HEAD | password/reset/{token}      |       | App\Http\Controllers\Auth\ResetPasswordController@showResetForm  | web,guest | 
|  | GET|HEAD | register         |       | App\Http\Controllers\Auth\RegisterController@showRegistrationForm  | web,guest | 
|  | POST  | register         |       | App\Http\Controllers\Auth\RegisterController@register     | web,guest | 
+--------+-----------+--------------------------------------------+-------------------------+------------------------------------------------------------------------+--------------+ 

Answer 1

你爲什麼不只是搶創建過程中身份驗證的用戶ID而不是將其發送至表格？這也可能是一個巨大的安全問題，因爲用戶可以修改該頁面的HTML並在不同的用戶ID下提交預訂。

這裏有一個修復：

/** 
* Store a newly created resource in storage. 
* 
* @param \Illuminate\Http\Request $request 
* 
* @return \Illuminate\Http\Response 
*/ 
public function store(Request $request) 
{ 
    // define rules 
    $rules = [ 
     'name' => 'between:2,255', 
    ]; 
    $this->validate($request, [ 
     'name' => 'required|unique:bookings|max:255', 
    ]); 

    $booking = new Booking(); 

    $booking->name = $request->name; 
    $booking->user_id = auth()->id(); 
    $booking->description = $request->description; 
    $booking->save(); 

    return Redirect::route('bookings.index')->withMessage('Booking Was Created'); 
} 

編輯：

你在這裏這條路線：

Route::post('/bookings/{id}', ['uses' => 'BookingsController@store', 'as' => 'bookings.store']); 

但在HTML中形成你發起PUT請求時，它應該是隻是一個標準POST：

<input name="_method" type="hidden" value="PUT"> 

Answer 2

您需要命名的路線別的東西，因爲bookings.store在Route::resource('bookings', 'BookingsController');

已定義的，我會建議排除從資源這個資源和定義您bookings.store帶有可選{id?}參數，您可以檢查是否存在這樣你就可以存儲用戶的預訂或基於存儲方法中該參數的存在的正常預訂。

也作爲@Steve Bauman建議，從您的表格中刪除<input name="_method" type="hidden" value="PUT">，因爲那裏它正在訪問您的bookings.update方法。

它都應該結合在一起如下：

Route::get('/', 'BookingsController@index'); 

    Route::resource('bookings', 'BookingsController', ['excep'=> ['store']]); 
    Route::post('/bookings/{id?}', ['uses' => 'BookingsController@store', 'as' => 'bookings.store']); 

    Route::resource('bookings.items', 'BookingItemController', ['except' => ['index', 'show']]); 
    Route::resource('agents', 'UsersController'); 
    Route::get('/bookings/{bookings}/items/{items}/complete', ['as' => 'bookings.items.complete', 'uses' => 'BookingItemController@complete']); 
    Auth::routes(); 

Route::get('/home', 'HomeController@index'); 
Route::get('/logout', function(){ 
    Auth::logout(); 
    return Redirect::route('bookings.index')->withErrors('You Are Logged Out!'); 
}); 
Route::post('/bookings/{id}', ['uses' => 'BookingsController@store', 'as' => 'bookings.store']); 

然後在您的存儲方法在你的控制器：

public function store(Request $request, $user_id = null) 
{ 
    // define rules 
    $rules = [ 
     'name' => 'between:2,255', 
    ]; 

    $this->validate($request, [ 
     'name' => 'required|unique:bookings|max:255', 
    ]); 

    $booking->name = $request->get('name'); 
    $booking->description = $request->get('description'); 

    $booking->user_id = $user_id; 

    $booking->save(); 

    return Redirect::route('bookings.index')->withMessage('Booking Was Created'); 
} 

通過這種方式，它會爲您處理的工作，如果有一個ID它會適用它，如果不是，那麼它將是null