Laravel Framework Practice Exam

Question 1 Laravel Framework

How do you test HTTP client calls without hitting the real API?

withoutOverlapping() prevents a scheduled task from running concurrently with itself — useful for long-running jobs. It writes a mutex file and respects a expireAt:
Schedule::command('x')->withoutOverlapping(15)->runInBackground();

required — field must be present
string|max:255 — string with max length
email — valid email format
unique:users,email — unique in table
confirmed — matches field_confirmation
exists:posts,id — must exist in table
nullable|image|mimes:jpg,png — optional image

Implement ShouldQueue:
class OrderShipped extends Mailable implements ShouldQueue
Set public $tries = 3; and public $backoff = 60;. Mail::send() dispatches the job onto the queue worker instead of sending inline. Use Http::fake():
Http::fake(['api.example.com/*' => Http::response(['ok' => true], 200)]);
After the call, assert: Http::assertSent(fn ($req) => $req['url'] === '...'). Combine with Http::preventStrayRequests() to catch unwired calls.

Question 2 Laravel Framework

How do you send notifications in Laravel?

Create a notification:
php artisan make:notification InvoicePaid
Define delivery channels in via() (mail, database, SMS, Slack). Send it:
$user->notify(new InvoicePaid($invoice));
Or use the Notification facade:
Notification::send($users, new InvoicePaid($invoice));

class ActiveScope implements Scope {
  public function apply(Builder $b, Model $m) {
    return $b->where('active', true);
  }
}

Register via static::addGlobalScope(new ActiveScope) in booted(). Remove with Model::withoutGlobalScope(ActiveScope::class). In config/database.php define entries under 'connections'. Use them via:
DB::connection('pgsql')->table(...)->get();
Or set a model's $connection property. Use a read/write split: 'mysql' => ['read' => [...], 'write' => [...]]. Gates are closure-based authorization checks defined in AuthServiceProvider:
Gate::define('update-post', function (User $user, Post $post) { return $user->id === $post->user_id; });
Check with:
Gate::allows('update-post', $post) or @can('update-post', $post) in Blade.

Question 3 Laravel Framework

How do you prevent lazy loading during development in Laravel?

$q = DB::table('a')->select('id', 'name');
DB::table('b')->union($q)->get();
DB::table('users')->select('*')->addSelect(['post_count' =>
  DB::table('posts')->selectRaw('count(*)')->whereColumn('posts.user_id', 'users.id')
])->get();

Subqueries become a select column; the result still has users.*. bind() creates a new instance each time the dependency is resolved.
singleton() resolves the class once and returns the same instance on subsequent calls:
$this->app->singleton(Service::class, function ($app) { return new Service(); }); A deadlock occurs when two transactions wait on each other's locks. Use DB::transaction($cb, $attempts) — Laravel retries the closure on serialization failures (Laravel detects deadlocks and rethrows; the $attempts parameter is the retry count). Combine with idempotent operations. Call Model::preventLazyLoading(!app()->isProduction()); in a service provider (often AppServiceProvider::boot()). Eloquent then throws LazyLoadingViolationException on any unguarded lazy relation access in non-production environments.

Question 4 Laravel Framework

What is the purpose of the $fillable and $guarded properties in Eloquent models?

Both protect against mass-assignment vulnerabilities. $fillable whitelists attributes allowed in create()/update():
protected $fillable = ['name', 'email'];
$guarded blacklists attributes, with $guarded = ['*'] blocking all mass assignment except the primary key. Policies are classes that organize authorization logic around a model:
php artisan make:policy PostPolicy --model=Post
Methods like update(User $user, Post $post) map to abilities. Policies are better for complex models; Gates are simpler closures for general checks. Use @includeWhen($condition, 'partial.name', ['data' => $x]) or @includeIf('partial.name', [...]) to silently skip when the view is missing. @includeFirst(['admin.post', 'post'], [...]) tries each in order. Sanctum provides a lightweight authentication system for:

SPA authentication — cookie-based session auth
API tokens — simple token-based auth for mobile/third-party apps

Issue tokens with:
$token = $user->createToken('app')->plainTextToken;

Question 5 Laravel Framework

What is the difference between bind and singleton in the service container?

Use Route::scopeBindings() or nested route definitions so child binding queries include the parent:

Route::scopeBindings()->group(function () {
  Route::get('/users/{user}/posts/{post}', ...);
});

Define Post::resolveRouteBindingQueryUsing(fn($q, $v, $f) => $q->whereBelongsTo($user)) on the child model (Laravel 11+) for the canonical way. bind() creates a new instance each time the dependency is resolved.
singleton() resolves the class once and returns the same instance on subsequent calls:
$this->app->singleton(Service::class, function ($app) { return new Service(); });

public function definition(): array {
  return ['user_id' => User::factory(), 'title' => fake()->sentence()];
}

Passing a factory as a value automatically creates and links a parent. Use User::factory()->for(Post::factory())->create() to make the reverse: a post belonging to a user. Sanctum provides a lightweight authentication system for:

SPA authentication — cookie-based session auth
API tokens — simple token-based auth for mobile/third-party apps

Issue tokens with:
$token = $user->createToken('app')->plainTextToken;

Question 6 Laravel Framework

What does @csrf do in Blade and why is it required?

@csrf outputs a hidden _token input used by Laravel's VerifyCsrfToken middleware to validate that POST/PUT/PATCH/DELETE requests originated from your site, preventing cross-site request forgery. It must be inside any HTML <form> that uses a non-GET verb. Use Model::withoutEvents(function () { /* mass operations */ });, or call $model->saveQuietly() / deleteQuietly() / updateQuietly() to skip events for a single save. Model::unsetEventDispatcher() removes the dispatcher entirely. Post::orderBy('id')->cursorPaginate(15);
Renders cursor query strings instead of page numbers — faster on large datasets and stable across inserts. Use ->previousCursor() and ->nextCursor() on the paginator instance. Use the Artisan command:
php artisan make:model Post -m
The -m flag generates a migration file alongside the model. You can also add -f for a factory and -s for a seeder.

Question 7 Laravel Framework

How do you render a Blade view from a string instead of a file?

Use the @markdown directive or Str::markdown():
@markdown($post->body)
For raw JSON in a <script> tag: @json($data) (HTML-escaped and valid JSON). Use Blade::render('Hello, {{ $name }}', ['name' => 'A']) (Laravel 9+) or the older view::render(). Useful for emails, dynamic templates, or stored HTML snippets. saving fires before any insert or update (also updating). creating fires only before inserts (companion: updating). After events are created / updated / saved. saved is fired on both insert and update and is the safest hook for side effects. Register the schedule in routes/console.php (Laravel 11+) or App\Console\Kernel:
Schedule::command('emails:send')->everyMinute()->withoutOverlapping();
Then add * * * * * cd /path && php artisan schedule:run >> /dev/null 2>&1 to crontab.

Question 8 Laravel Framework

How do you prevent model events from firing temporarily?

Both traverse two relationships via an intermediate model. hasManyThrough returns multiple results (e.g., a country's posts through users). hasOneThrough returns one result (e.g., a user's latest post through comments). The signature is hasManyThrough(Post::class, User::class). A resource controller handles all CRUD routes for a resource. Create with:
php artisan make:controller PhotoController --resource
Register with:
Route::resource('photos', PhotoController::class);
This generates routes for index, create, store, show, edit, update, destroy. Use Model::withoutEvents(function () { /* mass operations */ });, or call $model->saveQuietly() / deleteQuietly() / updateQuietly() to skip events for a single save. Model::unsetEventDispatcher() removes the dispatcher entirely.

DB::beginTransaction();
try { /* ... */ DB::commit(); }
catch (\Throwable $e) { DB::rollBack(); throw $e; }

Use DB::afterCommit(fn() => ...) to defer logic until the outermost transaction commits — useful for queue dispatch or notifications inside a transaction.

Question 9 Laravel Framework

How do you count related models efficiently with withCount in Eloquent?

public function definition(): array {
  return ['user_id' => User::factory(), 'title' => fake()->sentence()];
}

Passing a factory as a value automatically creates and links a parent. Use User::factory()->for(Post::factory())->create() to make the reverse: a post belonging to a user. Add a {relation}_count column to the result without loading the relation:
Post::withCount('comments')->orderBy('comments_count', 'desc')->get();
You can pass a callback to filter the count: withCount(['comments as active_comments_count' => fn($q) => $q->where('active', true)]). Blade is Laravel's templating engine. It provides convenient shortcuts for PHP control structures and template inheritance:

{{ $var }} — escaped output
@if, @foreach — control directives
@extends, @section, @yield — layout inheritance

Storage::disk('public')->put('a.txt', 'contents');
Storage::disk('public')->get('a.txt');
Storage::disk('public')->exists('a.txt');
Storage::disk('public')->delete('a.txt');
Storage::disk('public')->files('images');

Disks: local, public, s3, ftp, sftp. Default disk is config/filesystems.php 'default'.

Question 10 Laravel Framework

How do you define a Factory relationship in Laravel?

Cache::put('key', $value, now()->addMinutes(10));
Cache::remember('users', 60, fn () => User::all());
Cache::increment('hits');
Cache::forget('key');
Cache::flush();

Backend is configured in config/cache.php — file, redis, database, memcached, or array (testing).

public function definition(): array {
  return ['user_id' => User::factory(), 'title' => fake()->sentence()];
}

Passing a factory as a value automatically creates and links a parent. Use User::factory()->for(Post::factory())->create() to make the reverse: a post belonging to a user. A deadlock occurs when two transactions wait on each other's locks. Use DB::transaction($cb, $attempts) — Laravel retries the closure on serialization failures (Laravel detects deadlocks and rethrows; the $attempts parameter is the retry count). Combine with idempotent operations.

$table->unique(['user_id', 'slot']);   // composite unique
$table->index(['status', 'created_at']);   // composite non-unique

Composite indexes speed up queries filtering or sorting by their leftmost columns. Drop with $table->dropUnique(['user_id', 'slot']).

Question 11 Laravel Framework

How do you implement remember-me (persistent login) cookies?

Use Laravel's built-in mocking via the container:

$this->mock(PaymentGateway::class, function ($mock) {
  $mock->shouldReceive('charge')->once()->andReturn(true);
});

Or use Bus::fake(), Event::fake(), Notification::fake() for framework services. In Auth::attempt($credentials, true), the true flag issues a long-lived cookie. Add Illuminate\Cookie\Middleware\EncryptCookies middleware (already on by default). Implement Auth::viaRemember() check on subsequent requests. In config/database.php define entries under 'connections'. Use them via:
DB::connection('pgsql')->table(...)->get();
Or set a model's $connection property. Use a read/write split: 'mysql' => ['read' => [...], 'write' => [...]]. In a Form Request:
'photo' => ['required', 'image', 'max:2048']
Or manually:
$request->validate(['photo' => 'file|mimes:jpg,png|max:2048']);
Access the file with $request->file('photo'); move with ->store('images') or ->move(public_path(), 'x.jpg').

Question 12 Laravel Framework

How do you manually manage a database transaction?

In Laravel 11+, register in routes/console.php:

Artisan::command('mail:send {user}', function ($user) {
  Mail::to($user)->send(new OrderShipped);
})->purpose('Send a marketing email')->hourly();

Closure commands support arguments, options, scheduling, and isolation.

Route::middleware('throttle:60,1')->group(...);
RateLimiter::for('api', fn ($r) =>
  Limit::perMinute(60)->by($r->user()?->id ?: $r->ip()));

Register named limiters in a service provider's boot() using RateLimiter::for(...), then use throttle:api.

DB::transaction(function () {
  Account::find(1)->decrement('balance', 100);
  Account::find(2)->increment('balance', 100);
});

On any exception, all DB changes roll back automatically. Pass a second argument for retry attempts: DB::transaction($cb, 5).

DB::beginTransaction();
try { /* ... */ DB::commit(); }
catch (\Throwable $e) { DB::rollBack(); throw $e; }

Use DB::afterCommit(fn() => ...) to defer logic until the outermost transaction commits — useful for queue dispatch or notifications inside a transaction.

Question 13 Laravel Framework

How do you access extra columns on a pivot table in a many-to-many relationship?

In a service provider:
Blade::directive('datetime', fn ($exp) => "format('Y-m-d'); ?>");
Use it: @datetime($post->created_at). Return PHP to execute. Use Blade::if('admin', fn() => auth()->check() && auth()->user()->isAdmin()) for conditional directives. Use withPivot('column1', 'column2') in the relationship definition, then $user->pivot->column1. Add withTimestamps() to auto-populate created_at / updated_at on the pivot.

Log::info('User signed in', ['id' => $u->id]);
Log::channel('slack')->error('Boom');
Log::stack(['single', 'slack'])->warning('Heads up');

Channels configured in config/logging.php: single, daily, errorlog, syslog, slack, monolog, custom. paginate() runs a COUNT(*) query and exposes the total record count for "showing X of Y" UIs. simplePaginate() only knows whether a next page exists (one extra query). simplePaginate is cheaper and preferred for very large tables.

Question 14 Laravel Framework

How do you constrain a route parameter to a regex pattern?

Policies are classes that organize authorization logic around a model:
php artisan make:policy PostPolicy --model=Post
Methods like update(User $user, Post $post) map to abilities. Policies are better for complex models; Gates are simpler closures for general checks. In a service provider:
Blade::directive('datetime', fn ($exp) => "format('Y-m-d'); ?>");
Use it: @datetime($post->created_at). Return PHP to execute. Use Blade::if('admin', fn() => auth()->check() && auth()->user()->isAdmin()) for conditional directives. Use where() on the route definition:
Route::get('/user/{name}', ...)->where('name', '[A-Za-z]+');
For multiple: ->where(['id' => '[0-9]+', 'name' => '[a-z]+']). Global patterns go in Route::pattern('id', '[0-9]+') inside a service provider. Use select:
User::select('id', 'name')->get();
Or pluck a single column:
User::pluck('email');
Use addSelect when adding to an existing select in a subquery.

Question 15 Laravel Framework

How do you render Markdown emails with predefined templates?

Pass it to links():
{{ $items->links('pagination::tailwind') }}
Or build your own view and reference it: $items->links('partials.pager'). The view receives a Paginator instance. Use Content::markdown('mail.order') and place the view in resources/views/mail/order.blade.php. You can use Blade components like @component('mail::button', ['url' => $url]) from resources/views/vendor/mail/html/ for a styled layout.

$q = DB::table('a')->select('id', 'name');
DB::table('b')->union($q)->get();
DB::table('users')->select('*')->addSelect(['post_count' =>
  DB::table('posts')->selectRaw('count(*)')->whereColumn('posts.user_id', 'users.id')
])->get();

Subqueries become a select column; the result still has users.*.

$response = Http::get('https://api.example.com/users');
return $response->json();
$response->throw();              // throws on 4xx/5xx
Http::timeout(5)->retry(3)->get(...);

Set a base URL: Http::baseUrl('https://api.x.com')->withToken($t). POST JSON: Http::post($url, $data).

Question 16 Laravel Framework

How do you conditionally include a partial in Blade?

Implement terminate($request, $response) on the middleware class. Laravel calls it after sending the response. Don't put critical security logic here — the response is already on the wire. Use ->timezone('America/New_York'):
Schedule::command('reports:daily')->dailyAt('09:00')->timezone('Europe/Zagreb');
Laravel evaluates the cron in that timezone; the underlying cron daemon still runs on UTC. Use @includeWhen($condition, 'partial.name', ['data' => $x]) or @includeIf('partial.name', [...]) to silently skip when the view is missing. @includeFirst(['admin.post', 'post'], [...]) tries each in order. In a Form Request:
'photo' => ['required', 'image', 'max:2048']
Or manually:
$request->validate(['photo' => 'file|mimes:jpg,png|max:2048']);
Access the file with $request->file('photo'); move with ->store('images') or ->move(public_path(), 'x.jpg').

Question 17 Laravel Framework

How do you use cursor to iterate over a large Eloquent result set?

User::chunk(200, function ($users) {
  foreach ($users as $u) { /* ... */ }
});

chunkById paginates by primary key and is safer when records are modified mid-iteration (avoids skipped rows). lazy() and lazyById() return a LazyCollection for stream-style processing. User::cursor() runs a single unbuffered DB query and yields models one at a time using PHP generators. Memory stays flat regardless of result size, ideal for exports. Use cursorPaginate when you also need pagination metadata.

public function attachments(): array {
  return [Attachment::fromStorageDisk('s3', 'invoice.pdf')->as('Inv.pdf')];
}

For inline images: embed($path) in the build closure. fromPath / fromData accept raw strings. Use View::share('key', $value) in a service provider's boot(), or return data from AppServiceProvider::boot():
view()->share('siteName', config('app.name'));
The variable is then available in every template rendered afterwards.

Question 18 Laravel Framework

What is withoutOverlapping used for in scheduled tasks?

You can pass data in several ways:

return view('profile', ['user' => $user]);
return view('profile')->with('user', $user);
return view('profile', compact('user'));

All make $user available in the template. withoutOverlapping() prevents a scheduled task from running concurrently with itself — useful for long-running jobs. It writes a mutex file and respects a expireAt:
Schedule::command('x')->withoutOverlapping(15)->runInBackground(); Use the config() helper:

config('app.timezone');
config(['app.timezone' => 'UTC']);

Always access through config() — never env() outside config files. php artisan config:cache compiles all config into one file in production. Global middleware runs on every HTTP request to your application (e.g., TrimStrings).
Route middleware is assigned to specific routes or groups:
Route::get('/admin', ...)->middleware('auth');
Route middleware gives you fine-grained control.

Question 19 Laravel Framework

How do you validate form requests in Laravel?

route('users.show', ['id' => 1]);                  // named route
action([UserController::class, 'show'], ['id' => 1]);
URL::signedRoute('orders.download', ['order' => 5]);

route() resolves named routes; pass array params or a model (auto-extracts its primary key and route key). Inline validation:
$request->validate(['title' => 'required|max:255', 'body' => 'required']);
Form Request class:
php artisan make:request StorePostRequest
Define rules in the rules() method. Type-hint it in the controller — validation runs automatically. Lazy eager loading resolves N+1 after the parent query already ran, via load():

$posts = Post::all();
$posts->load('author', 'comments');

Use it when you already have a collection and need related models only conditionally (e.g., inside a Blade loop or when gated by logic). Service providers are the central place for bootstrapping Laravel applications. They register bindings in the service container and configure services:

register() — bind classes into the container
boot() — called after all providers are registered; configure routes, event listeners, etc.

Question 20 Laravel Framework

How do you insert, update, and delete records using Eloquent?

Schema::table('x', fn (Blueprint $t) => $t) + DB::table('x')->truncate() removes all rows and resets auto-increment. DB::table('x')->delete() removes rows but does not reset the sequence. Truncate is faster but cannot be rolled back inside a transaction in MySQL. Named routes let you generate URLs and redirects without hard-coding paths:
Route::get('/dashboard', [DashController::class, 'index'])->name('dashboard');
Generate URLs with:
route('dashboard')
Redirect with:
return redirect()->route('dashboard'); Facades provide a static-like interface to classes available in the service container:
Cache::get('key');
Behind the scenes, this resolves the cache binding from the container and calls get() on it. They offer concise syntax while remaining testable.

$model = new User; $model->name = 'A'; $model->save();
User::create(['name' => 'A']);              // requires $fillable or $guarded
$user->update(['name' => 'B']);
$user->delete();

Mass assignment via create() / update() is gated by $fillable or unguarded via $guarded = [].

Question 21 Laravel Framework

How do you handle CSRF token mismatches in SPAs that POST to the same Laravel app?

Use Route::resource() plus explicit routes before it (more specific routes win):

Route::get('/posts/popular', [PostController::class, 'popular']);
Route::resource('posts', PostController::class);

This keeps the standard CRUD routes while exposing custom actions. For SPA auth via Sanctum, send the XSRF-TOKEN cookie value in the X-XSRF-TOKEN header. Axios does this automatically when withCredentials is set. Configure in config/sanctum.php under stateful. User::firstWhere('email', 'a@b.com') is shorthand for where(...)->first(). Variants: whereKey(5) / whereKeyNot(5) match by primary key; whereKey([1,2,3]) matches any of them.

$model = new User; $model->name = 'A'; $model->save();
User::create(['name' => 'A']);              // requires $fillable or $guarded
$user->update(['name' => 'B']);
$user->delete();

Mass assignment via create() / update() is gated by $fillable or unguarded via $guarded = [].

Question 22 Laravel Framework

How do you define a route group with shared prefix and middleware?

public function suspended(): static {
  return $this->state(['suspended_at' => now()]);
}

Use: User::factory()->suspended()->create(); Chain multiple states: User::factory()->admin()->suspended()->create();.

Route::prefix('admin')->middleware('auth')->group(function () {
  Route::get('/dashboard', ...);
  Route::resource('posts', AdminPostController::class);
});

Other group attributes: name (prefixes route names), domain (subdomain), where (regex constraints), scopeBindings() (nested binding resolution). For SPA auth via Sanctum, send the XSRF-TOKEN cookie value in the X-XSRF-TOKEN header. Axios does this automatically when withCredentials is set. Configure in config/sanctum.php under stateful. Lazy eager loading resolves N+1 after the parent query already ran, via load():

$posts = Post::all();
$posts->load('author', 'comments');

Use it when you already have a collection and need related models only conditionally (e.g., inside a Blade loop or when gated by logic).

Question 23 Laravel Framework

How do you share a variable with all Blade views globally?

Use View::share('key', $value) in a service provider's boot(), or return data from AppServiceProvider::boot():
view()->share('siteName', config('app.name'));
The variable is then available in every template rendered afterwards.

User::orderBy('created_at', 'desc')->get();
User::latest()->get();                  // order by created_at desc
User::oldest()->get();
User::inRandomOrder()->first();
User::skip(10)->take(5)->get();

latest / oldest accept an optional column name. Hard delete removes the record permanently:
$post->delete();
Soft delete sets a deleted_at timestamp instead. Add the trait:
use SoftDeletes;
And add $table->softDeletes(); in the migration. Restore with:
$post->restore(); Use morphMany() on the parent and morphTo() on the child. The child table needs morphs() columns:
$table->morphs('commentable');
Parent: return $this->morphMany(Comment::class, 'commentable');

Question 24 Laravel Framework

What is middleware in Laravel?

Return belongsToMany from both models pointing at the pivot table:
public function roles() { return $this->belongsToMany(Role::class); }
public function users() { return $this->belongsToMany(User::class); }
Laravel assumes the pivot is role_user (alphabetical, singular). Pass a second argument to override. Middleware filters HTTP requests entering your application. It runs before or after a request is handled:

Authentication — verify user is logged in
CORS — add cross-origin headers
Logging — log request details

Defined in app/Http/Middleware/. Create a test:
php artisan make:test UserTest
Use HTTP testing methods:
public function test_homepage_returns_ok(): void { $this->get('/')->assertStatus(200); }
Run with:
php artisan test or ./vendor/bin/phpunit Use hasOne() on the parent and belongsTo() on the child. Convention: the child table contains the foreign key (user_id for a Phone). Example:
return $this->hasOne(Phone::class);

Question 25 Laravel Framework

What is the difference between has and whereHas in Eloquent?

has('posts') filters to models with at least one related record. whereHas('posts', $cb) additionally accepts a callback to add constraints to the relation query. has() accepts a comparison operator and count: has('posts', '>', 5).

$table->dropColumn('is_admin');
$table->dropColumn(['a', 'b']);
$table->renameColumn('old', 'new');

Renaming a column requires the doctrine/dbal package on Laravel < 10. From Laravel 10+ native column renames work without extra dependencies. Use flash():
$request->session()->flash('status', 'Profile updated!');
Retrieve with session('status'). now() is a fluent alternative: session()->now('info', 'Just for this request'). keep() re-flashes for an additional request. Use DB::raw() for select fragments and parameterize user input:
User::select(DB::raw('count(*) as total, year(created_at) as yr'))->groupBy('yr')->get();
Never concatenate user input into raw SQL — always bind: ->whereRaw('email = ?', [$email]).

Question 26 Laravel Framework

How do you pass data to a Blade view?

You can pass data in several ways:

return view('profile', ['user' => $user]);
return view('profile')->with('user', $user);
return view('profile', compact('user'));

All make $user available in the template.

Schema::create('posts', function (Blueprint $t) {
  $t->id();
  $t->foreignId('user_id')->constrained()->cascadeOnDelete();
  $t->string('title');
});

constrained() infers the table name from the column; pass an argument to override (constrained('users')). Use cascadeOnUpdate(), nullOnDelete(), or restrictOnDelete(). Laravel can automatically inject model instances matching route parameters:
Route::get('/posts/{post}', function (Post $post) { return $post; });
If the type-hinted variable matches the parameter name, Laravel resolves it by primary key automatically. Use getRouteKeyName() to customize. In Laravel 11+, register in routes/console.php:

Artisan::command('mail:send {user}', function ($user) {
  Mail::to($user)->send(new OrderShipped);
})->purpose('Send a marketing email')->hourly();

Closure commands support arguments, options, scheduling, and isolation.

Question 27 Laravel Framework

What is Laravel Eloquent ORM?

Collections wrap arrays with a fluent, chainable API for data manipulation:
collect([1, 2, 3])->map(fn($n) => $n * 2)->filter(fn($n) => $n > 2)->values();
Eloquent queries return Collections. They provide 100+ methods like pluck, groupBy, reduce, sortBy, and chunk.

public function newUniqueId() { return (string) Str::uuid(); }
public $incrementing = false;
protected $keyType = 'string';

Or set in creating: static::creating(fn ($m) => $m->{$m->getKeyName()} = Str::uuid());. The migration should use $table->uuid('id')->primary();. Eloquent is Laravel's built-in Active Record ORM. Each database table has a corresponding Model class used to interact with that table. It provides an expressive syntax for queries:
$users = User::where('active', true)->get(); Use @includeWhen($condition, 'partial.name', ['data' => $x]) or @includeIf('partial.name', [...]) to silently skip when the view is missing. @includeFirst(['admin.post', 'post'], [...]) tries each in order.

Question 28 Laravel Framework

How do you prevent a scheduled task from running when a condition is met?

Chain ->when() or ->skip():
Schedule::command('emails:blast')->when(fn () => ! app()->isDownForMaintenance())->daily();
->skip(fn () => ...) is the inverse. ->environments('production') restricts by APP_ENV. bind() creates a new instance each time the dependency is resolved.
singleton() resolves the class once and returns the same instance on subsequent calls:
$this->app->singleton(Service::class, function ($app) { return new Service(); });

public function definition(): array {
  return ['user_id' => User::factory(), 'title' => fake()->sentence()];
}

Passing a factory as a value automatically creates and links a parent. Use User::factory()->for(Post::factory())->create() to make the reverse: a post belonging to a user. Call $new = $model->replicate(); to get a new unsaved instance with attributes copied. Optionally exclude attributes:
$new = $model->replicate(['views_count']);
Then modify and $new->save();. The new record gets a fresh primary key and timestamps.

Question 29 Laravel Framework

How do you make uploaded files publicly accessible?

Create an event and listener:
php artisan make:event OrderShipped
php artisan make:listener SendShipmentNotification --event=OrderShipped
Register in EventServiceProvider or use auto-discovery. Dispatch with:
event(new OrderShipped($order)); User::cursor() runs a single unbuffered DB query and yields models one at a time using PHP generators. Memory stays flat regardless of result size, ideal for exports. Use cursorPaginate when you also need pagination metadata. Return belongsToMany from both models pointing at the pivot table:
public function roles() { return $this->belongsToMany(Role::class); }
public function users() { return $this->belongsToMany(User::class); }
Laravel assumes the pivot is role_user (alphabetical, singular). Pass a second argument to override. Run php artisan storage:link to symlink storage/app/public into public/storage. Save to the public disk: $request->file('avatar')->store('avatars', 'public'). Serve via asset('storage/avatars/x.jpg').

Question 30 Laravel Framework

How do you create and register custom middleware?

Create with Artisan:
php artisan make:middleware CheckAge
Implement logic in the handle() method. Register it in bootstrap/app.php (Laravel 11+) or app/Http/Kernel.php (older versions) as route middleware or global middleware.

Schema::create('posts', function (Blueprint $t) {
  $t->id();
  $t->foreignId('user_id')->constrained()->cascadeOnDelete();
  $t->string('title');
});

constrained() infers the table name from the column; pass an argument to override (constrained('users')). Use cascadeOnUpdate(), nullOnDelete(), or restrictOnDelete(). In a Form Request:
'photo' => ['required', 'image', 'max:2048']
Or manually:
$request->validate(['photo' => 'file|mimes:jpg,png|max:2048']);
Access the file with $request->file('photo'); move with ->store('images') or ->move(public_path(), 'x.jpg'). In a service provider:
Blade::directive('datetime', fn ($exp) => "format('Y-m-d'); ?>");
Use it: @datetime($post->created_at). Return PHP to execute. Use Blade::if('admin', fn() => auth()->check() && auth()->user()->isAdmin()) for conditional directives.

Question 31 Laravel Framework

How do you add a composite or compound unique index via a migration?

User::whereIn('id', [1, 2, 3])->get();
User::whereBetween('age', [18, 30])->get();
User::whereNotIn('status', ['banned'])->get();

Combine with orWhereIn / whereNull / whereDate for richer filters.

User::orderBy('created_at', 'desc')->get();
User::latest()->get();                  // order by created_at desc
User::oldest()->get();
User::inRandomOrder()->first();
User::skip(10)->take(5)->get();

latest / oldest accept an optional column name.

$table->unique(['user_id', 'slot']);   // composite unique
$table->index(['status', 'created_at']);   // composite non-unique

Composite indexes speed up queries filtering or sorting by their leftmost columns. Drop with $table->dropUnique(['user_id', 'slot']). Facades provide a static-like interface to classes available in the service container:
Cache::get('key');
Behind the scenes, this resolves the cache binding from the container and calls get() on it. They offer concise syntax while remaining testable.

Question 32 Laravel Framework

How do you send a plain-text or HTML email in Laravel?

A deadlock occurs when two transactions wait on each other's locks. Use DB::transaction($cb, $attempts) — Laravel retries the closure on serialization failures (Laravel detects deadlocks and rethrows; the $attempts parameter is the retry count). Combine with idempotent operations. HTTP verbs map to controller actions: Route::get() (read), Route::post() (create), Route::put() / Route::patch() (update), Route::delete() (delete), Route::any() (all), Route::match(['get','post'], ...) (subset). Use Route::resource() to declare all CRUD verbs at once. Use Mail with raw text:

Mail::raw('Hello!', function ($m) {
  $m->to('a@b.com')->subject('Hi');
});

Or send a Markdown/HTML view:
Mail::send('emails.welcome', ['user' => $u], function ($m) use ($u) { $m->to($u->email); }); The service container is a powerful tool for managing class dependencies and dependency injection. It resolves classes and their dependencies automatically:
$this->app->bind(Interface::class, Implementation::class);
Laravel's core components are all resolved through the container.

Question 33 Laravel Framework

What is Laravel Sanctum used for?

Pass it to links():
{{ $items->links('pagination::tailwind') }}
Or build your own view and reference it: $items->links('partials.pager'). The view receives a Paginator instance. Sanctum provides a lightweight authentication system for:

SPA authentication — cookie-based session auth
API tokens — simple token-based auth for mobile/third-party apps

Issue tokens with:
$token = $user->createToken('app')->plainTextToken; Enable in AppServiceProvider:
DB::listen(fn ($q) => logger()->info($q->sql, $q->bindings, $q->time));
Or use DB::enableQueryLog() + DB::getQueryLog(). The Laravel Debugbar package wraps this for a UI. In config/database.php define entries under 'connections'. Use them via:
DB::connection('pgsql')->table(...)->get();
Or set a model's $connection property. Use a read/write split: 'mysql' => ['read' => [...], 'write' => [...]].

Question 34 Laravel Framework

What is the difference between firstOrCreate and updateOrCreate in Eloquent?

firstOrCreate() inserts a new record only if no matching record is found using the given attributes:
User::firstOrCreate(['email' => $x], ['name' => 'A']);
updateOrCreate() updates the matching record if found, or creates one with both attribute sets merged:
User::updateOrCreate(['email' => $x], ['name' => 'B']); migrate:refresh rolls back all migrations then re-runs them (keeps tables). migrate:fresh drops all tables then re-runs (destroys data). Use --seed with either:
php artisan migrate:fresh --seed
Use fresh when schema is broken; refresh when you want to undo and reapply. Define a route in routes/channels.php:
Broadcast::channel('orders.{id}', fn ($user, $id) => $user->id === (int) $id);
Private channels use the auth:api middleware. PresenceChannel callbacks additionally return an array of presence data. Pint (Laravel's default, zero-config): vendor/bin/pint. Auto-fix unsafe rules: vendor/bin/pint --test reports without fixing. Pint config goes in pint.json at the project root. PHPCS: vendor/bin/phpcs --standard=PSR12 app/

Question 35 Laravel Framework

Why should env() never be called outside config files?

Once config:cache runs, all env() calls outside config return null because .env is no longer loaded per request. This causes silent failures in production. Inside config files is the only safe place; everywhere else use config().

Storage::disk('public')->put('a.txt', 'contents');
Storage::disk('public')->get('a.txt');
Storage::disk('public')->exists('a.txt');
Storage::disk('public')->delete('a.txt');
Storage::disk('public')->files('images');

Disks: local, public, s3, ftp, sftp. Default disk is config/filesystems.php 'default'. For SPA auth via Sanctum, send the XSRF-TOKEN cookie value in the X-XSRF-TOKEN header. Axios does this automatically when withCredentials is set. Configure in config/sanctum.php under stateful. Accessors transform attribute values when reading:
protected function firstName(): Attribute { return Attribute::make(get: fn($value) => ucfirst($value)); }
Mutators transform values when setting:
set: fn($value) => strtolower($value)

Question 36 Laravel Framework

How do you use Laravel Pint or PHP_CodeSniffer to lint code?

$table->dropColumn('is_admin');
$table->dropColumn(['a', 'b']);
$table->renameColumn('old', 'new');

Renaming a column requires the doctrine/dbal package on Laravel < 10. From Laravel 10+ native column renames work without extra dependencies. The paginator's page query parameter is the default. Change globally in AppServiceProvider::boot():
Paginator::defaultSimpleView('pagination::simple-default');
Or per-call: Paginator::currentPageResolver(fn() => request('p', 1)). has('posts') filters to models with at least one related record. whereHas('posts', $cb) additionally accepts a callback to add constraints to the relation query. has() accepts a comparison operator and count: has('posts', '>', 5). Pint (Laravel's default, zero-config): vendor/bin/pint. Auto-fix unsafe rules: vendor/bin/pint --test reports without fixing. Pint config goes in pint.json at the project root. PHPCS: vendor/bin/phpcs --standard=PSR12 app/

Question 37 Laravel Framework

What are some commonly used Artisan CLI commands?

Eloquent is Laravel's built-in Active Record ORM. Each database table has a corresponding Model class used to interact with that table. It provides an expressive syntax for queries:
$users = User::where('active', true)->get();

$model = new User; $model->name = 'A'; $model->save();
User::create(['name' => 'A']);              // requires $fillable or $guarded
$user->update(['name' => 'B']);
$user->delete();

Mass assignment via create() / update() is gated by $fillable or unguarded via $guarded = []. queue:work boots the framework once and processes jobs efficiently — best for production.
queue:listen restarts the framework for each job — useful during development so code changes take effect immediately, but is slower.

php artisan serve — start dev server
php artisan migrate — run migrations
php artisan make:model — create a model
php artisan tinker — interactive REPL
php artisan route:list — list all routes
php artisan cache:clear — clear app cache

Question 38 Laravel Framework

How do you create an anonymous Blade component?

Route parameters capture segments of the URI:
Required: Route::get('/user/{id}', ...)
Optional: Route::get('/user/{name?}', ...)
Parameters are passed as arguments to the closure or controller method. Drop a file into resources/views/components/. For resources/views/components/alert.blade.php, use it as <x-alert />. No class needed. Slots work with {{ $slot }}; named slots with <x-slot:name>...</x-slot:name>.

Cache::put('key', $value, now()->addMinutes(10));
Cache::remember('users', 60, fn () => User::all());
Cache::increment('hits');
Cache::forget('key');
Cache::flush();

Backend is configured in config/cache.php — file, redis, database, memcached, or array (testing).

$copy = $model->fresh();        // new instance from DB
$model->refresh();              // mutates the same instance

fresh() leaves the original untouched; refresh() overwrites attributes (and relations by default) on the existing object. Use refresh(['comments']) to also reload specific relations.

Question 39 Laravel Framework

How do you log messages to a channel in Laravel?

Log::info('User signed in', ['id' => $u->id]);
Log::channel('slack')->error('Boom');
Log::stack(['single', 'slack'])->warning('Heads up');

Channels configured in config/logging.php: single, daily, errorlog, syslog, slack, monolog, custom.

$table->dropColumn('is_admin');
$table->dropColumn(['a', 'b']);
$table->renameColumn('old', 'new');

Renaming a column requires the doctrine/dbal package on Laravel < 10. From Laravel 10+ native column renames work without extra dependencies. Enable in AppServiceProvider:
DB::listen(fn ($q) => logger()->info($q->sql, $q->bindings, $q->time));
Or use DB::enableQueryLog() + DB::getQueryLog(). The Laravel Debugbar package wraps this for a UI. You can pass data in several ways:

return view('profile', ['user' => $user]);
return view('profile')->with('user', $user);
return view('profile', compact('user'));

All make $user available in the template.

Question 40 Laravel Framework

How do you use the Storage facade to read, write, and delete files?

Inline validation:
$request->validate(['title' => 'required|max:255', 'body' => 'required']);
Form Request class:
php artisan make:request StorePostRequest
Define rules in the rules() method. Type-hint it in the controller — validation runs automatically. Named routes let you generate URLs and redirects without hard-coding paths:
Route::get('/dashboard', [DashController::class, 'index'])->name('dashboard');
Generate URLs with:
route('dashboard')
Redirect with:
return redirect()->route('dashboard'); Use the authorize() method:
$this->authorize('update', $post);
This throws an AuthorizationException (403) if denied. You can also use:

Gate::allows('update', $post)
$user->can('update', $post)
@can('update', $post) in Blade

Storage::disk('public')->put('a.txt', 'contents');
Storage::disk('public')->get('a.txt');
Storage::disk('public')->exists('a.txt');
Storage::disk('public')->delete('a.txt');
Storage::disk('public')->files('images');

Disks: local, public, s3, ftp, sftp. Default disk is config/filesystems.php 'default'.

Question 41 Laravel Framework

How do you enable automatic scoping of route model bindings by parent?

In Laravel 11+, override the model's binding query:
Post::resolveRouteBindingQueryUsing(fn($q, $value, $field) => $q->whereBelongsTo(request()->user()));
Or define a relationship like posts() on the parent and use scoped routes:
Route::get('/users/{user}/posts/{post}', [PostController::class, 'show']); Use ->timezone('America/New_York'):
Schedule::command('reports:daily')->dailyAt('09:00')->timezone('Europe/Zagreb');
Laravel evaluates the cron in that timezone; the underlying cron daemon still runs on UTC. Use Blade::render('Hello, {{ $name }}', ['name' => 'A']) (Laravel 9+) or the older view::render(). Useful for emails, dynamic templates, or stored HTML snippets. Route parameters capture segments of the URI:
Required: Route::get('/user/{id}', ...)
Optional: Route::get('/user/{name?}', ...)
Parameters are passed as arguments to the closure or controller method.

Question 42 Laravel Framework

How do you retrieve records matching specific criteria using whereIn and whereBetween?

Accessors transform attribute values when reading:
protected function firstName(): Attribute { return Attribute::make(get: fn($value) => ucfirst($value)); }
Mutators transform values when setting:
set: fn($value) => strtolower($value)

public function suspended(): static {
  return $this->state(['suspended_at' => now()]);
}

Use: User::factory()->suspended()->create(); Chain multiple states: User::factory()->admin()->suspended()->create();.

User::whereIn('id', [1, 2, 3])->get();
User::whereBetween('age', [18, 30])->get();
User::whereNotIn('status', ['banned'])->get();

Combine with orWhereIn / whereNull / whereDate for richer filters. Generate with php artisan make:observer UserObserver --model=User, then register in a provider:
User::observe(UserObserver::class);
Events: retrieved, creating, created, updating, updated, saving, saved, deleting, deleted, restoring, restored.

Question 43 Laravel Framework

How do you write a custom 404 / 500 error page?

public function suspended(): static {
  return $this->state(['suspended_at' => now()]);
}

Use: User::factory()->suspended()->create(); Chain multiple states: User::factory()->admin()->suspended()->create();. Create resources/views/errors/404.blade.php and resources/views/errors/500.blade.php. Laravel renders them automatically when an HTTP exception occurs. Use $exception->getStatusCode() inside if needed.

User::chunk(200, function ($users) {
  foreach ($users as $u) { /* ... */ }
});

chunkById paginates by primary key and is safer when records are modified mid-iteration (avoids skipped rows). lazy() and lazyById() return a LazyCollection for stream-style processing.

map() — transform each item
filter() — keep items passing a test
pluck('name') — extract a single column
groupBy('status') — group by key
sum('price') — sum a field
first() / last() — get first/last item
unique() — remove duplicates

Question 44 Laravel Framework

How do you stack and push scripts/styles from child Blade templates?

@stack('scripts')
@push('scripts')
  <script src="/x.js"></script>
@endpush

The parent uses @stack('scripts') to render, child templates @push content into the stack. @prepend adds to the beginning. Use Blade::render('Hello, {{ $name }}', ['name' => 'A']) (Laravel 9+) or the older view::render(). Useful for emails, dynamic templates, or stored HTML snippets. Tinker is an interactive REPL (Read-Eval-Print Loop) powered by PsySH. It lets you interact with your entire Laravel application from the command line:
php artisan tinker
You can create models, run queries, test methods, and dispatch jobs interactively. Facades provide a static-like interface to classes available in the service container:
Cache::get('key');
Behind the scenes, this resolves the cache binding from the container and calls get() on it. They offer concise syntax while remaining testable.

Question 45 Laravel Framework

How do you schedule an Artisan command to run every minute in production?

Register the schedule in routes/console.php (Laravel 11+) or App\Console\Kernel:
Schedule::command('emails:send')->everyMinute()->withoutOverlapping();
Then add * * * * * cd /path && php artisan schedule:run >> /dev/null 2>&1 to crontab.

route('users.show', ['id' => 1]);                  // named route
action([UserController::class, 'show'], ['id' => 1]);
URL::signedRoute('orders.download', ['order' => 5]);

route() resolves named routes; pass array params or a model (auto-extracts its primary key and route key). Run php artisan storage:link to symlink storage/app/public into public/storage. Save to the public disk: $request->file('avatar')->store('avatars', 'public'). Serve via asset('storage/avatars/x.jpg'). User::firstWhere('email', 'a@b.com') is shorthand for where(...)->first(). Variants: whereKey(5) / whereKeyNot(5) match by primary key; whereKey([1,2,3]) matches any of them.

Question 46 Laravel Framework

What is the difference between find, findOrFail, and firstOrFail in Eloquent?

public function attachments(): array {
  return [Attachment::fromStorageDisk('s3', 'invoice.pdf')->as('Inv.pdf')];
}

For inline images: embed($path) in the build closure. fromPath / fromData accept raw strings.

$model = new User; $model->name = 'A'; $model->save();
User::create(['name' => 'A']);              // requires $fillable or $guarded
$user->update(['name' => 'B']);
$user->delete();

Mass assignment via create() / update() is gated by $fillable or unguarded via $guarded = [].

User::find(1);              // null if missing
User::findOrFail(1);       // throws ModelNotFoundException
User::where('active', 1)->firstOrFail();

Use findOrFail / firstOrFail when the record must exist — Laravel converts the exception into an automatic 404 HTTP response. In .env: CACHE_STORE=redis. Or per-call:
Cache::store('redis')->put('k', 'v', 60);
Custom stores can be added with Cache::extend('myStore', fn() => ...) in a service provider.

Question 47 Laravel Framework

What is the difference between Route::get and Route::post and the other HTTP verbs?

DB::table('users')->where('active', true)->orderBy('id')->get();
DB::table('users')->insert(['name' => 'A']);
DB::table('users')->where('id', 1)->update(['name' => 'B']);
DB::table('users')->where('id', 1)->delete();
DB::table('users')->truncate();

DB returns stdClass arrays; first() returns one row or null. Use the auth() helper or Auth facade:

$user = auth()->user();
Auth::user();
Auth::id();
Auth::check();             // bool
Auth::guest();

For specific guards: Auth::guard('api')->user(). HTTP verbs map to controller actions: Route::get() (read), Route::post() (create), Route::put() / Route::patch() (update), Route::delete() (delete), Route::any() (all), Route::match(['get','post'], ...) (subset). Use Route::resource() to declare all CRUD verbs at once. has('posts') filters to models with at least one related record. whereHas('posts', $cb) additionally accepts a callback to add constraints to the relation query. has() accepts a comparison operator and count: has('posts', '>', 5).

Question 48 Laravel Framework

What are Laravel event subscribers?

An event subscriber is a class that subscribes to multiple events from within the class itself:

public function subscribe(Dispatcher $events) {
  $events->listen(OrderShipped::class, [self::class, 'handleShipment']);
}

Register it in the $subscribe property of EventServiceProvider. Route parameters capture segments of the URI:
Required: Route::get('/user/{id}', ...)
Optional: Route::get('/user/{name?}', ...)
Parameters are passed as arguments to the closure or controller method. has('posts') filters to models with at least one related record. whereHas('posts', $cb) additionally accepts a callback to add constraints to the relation query. has() accepts a comparison operator and count: has('posts', '>', 5). Use Cache::lock('key', 10):
Cache::lock('foo')->block(5, function () { /* exclusive */ });
block() waits up to N seconds for the lock. get(fn) runs the callback if the lock is acquired, else returns null.

Question 49 Laravel Framework

How do you handle a 404 / ModelNotFoundException globally?

route('users.show', ['id' => 1]);                  // named route
action([UserController::class, 'show'], ['id' => 1]);
URL::signedRoute('orders.download', ['order' => 5]);

route() resolves named routes; pass array params or a model (auto-extracts its primary key and route key). Chain ->when() or ->skip():
Schedule::command('emails:blast')->when(fn () => ! app()->isDownForMaintenance())->daily();
->skip(fn () => ...) is the inverse. ->environments('production') restricts by APP_ENV. Collections wrap arrays with a fluent, chainable API for data manipulation:
collect([1, 2, 3])->map(fn($n) => $n * 2)->filter(fn($n) => $n > 2)->values();
Eloquent queries return Collections. They provide 100+ methods like pluck, groupBy, reduce, sortBy, and chunk. Render a custom view: implement App\Exceptions\Handler::render() or simply throw abort(404). In Laravel 11+: bootstrap/app.php uses withExceptions(fn ($e) => $e->render(fn (ModelNotFoundException $e, $r) => ...)). Convert to a JSON response when $request->wantsJson().

Question 50 Laravel Framework

How do you use the booted method in an Eloquent model for global setup?

Scopes define reusable query constraints:
Global scope: applies automatically to all queries on a model.
Local scope: applied explicitly:
public function scopeActive($query) { return $query->where('active', true); }
Use as: User::active()->get();

protected static function booted(): void {
  static::creating(fn ($m) => $m->uuid = Str::uuid());
  static::addGlobalScope(new ActiveScope);
}

booted() is the canonical place to register model events (creating, created, updating, saving, deleted, etc.) and global scopes. Append them after a colon:
Route::get('/admin', ...)->middleware('role:editor,admin');
In the middleware:
public function handle($request, Closure $next, ...$roles) { ... }
Each comma-separated value becomes a variadic argument.

$model = new User; $model->name = 'A'; $model->save();
User::create(['name' => 'A']);              // requires $fillable or $guarded
$user->update(['name' => 'B']);
$user->delete();

Mass assignment via create() / update() is gated by $fillable or unguarded via $guarded = [].