Laravel Tutorials

Laravel Strict Validation for Type Checking

Published
Laravel Strict Validation for Type Checking image

PHP's type juggling allows "1" to pass as boolean and numeric strings to pass as integers. Laravel's strict validation parameters enforce exact type matching for numeric, boolean, and integer rules.

Without strict mode, these validations accept type‑coerced values:

Validator::make(['count' => '42'], ['count' => 'numeric']); // passes
Validator::make(['active' => '1'], ['active' => 'boolean']); // passes

Both pass validation despite being strings rather than proper types.

Strict parameters require exact type matches:

use Illuminate\Support\Facades\Validator;
 
Validator::make(['count' => '42'], ['count' => 'numeric:strict']); // fails
Validator::make(['count' => 42], ['count' => 'numeric:strict']); // passes
 
Validator::make(['active' => '1'], ['active' => 'boolean:strict']); // fails
Validator::make(['active' => true], ['active' => 'boolean:strict']); // passes
 
Validator::make(['age' => '25'], ['age' => 'integer:strict']); // fails
Validator::make(['age' => 25], ['age' => 'integer:strict']); // passes

API endpoints handling configuration data benefit from strict type validation:

public function updateSettings(Request $request)
{
$validator = Validator::make($request->all(), [
'notifications_enabled' => 'boolean:strict',
'items_per_page' => 'integer:strict',
'refresh_rate' => 'numeric:strict',
]);
 
if ($validator->fails()) {
return response()->json(['errors' => $validator->errors()], 422);
}
 
$settings = $validator->validated();
 
if ($settings['notifications_enabled'] === true) {
$this->enableNotifications();
}
}

Without strict validation, JSON payloads with string values like {"notifications_enabled": "1", "items_per_page": "25"} pass validation but cause type issues in application logic.

Type validation behavior differs between modes:

Validator::make(['foo' => '1'], ['foo' => 'numeric:strict']); // fails
Validator::make(['foo' => 1], ['foo' => 'numeric:strict']); // passes
Validator::make(['foo' => 1.5], ['foo' => 'numeric:strict']); // passes
 
Validator::make(['active' => true], ['active' => 'boolean:strict']); // passes
Validator::make(['active' => false], ['active' => 'boolean:strict']); // passes
Validator::make(['active' => 1], ['active' => 'boolean:strict']); // fails
 
Validator::make(['count' => 42], ['count' => 'integer:strict']); // passes
Validator::make(['count' => '42'], ['count' => 'integer:strict']); // fails

Strict mode validation prevents type coercion issues by requiring values match the expected PHP type exactly, not just be castable to that type.

Harris Raftopoulos photo

Senior Software Engineer • Staff & Educator @ Laravel News • Co-organizer @ Laravel Greece Meetup

Sponsored

laravelcloud logo
Laravel Cloud

Easily create and manage your servers and deploy your Laravel applications in seconds.

Visit Laravel Cloud

The latest

View all →
Volker Dusch on the PHP RCE Vulnerabilities and Disclosure image

Volker Dusch on the PHP RCE Vulnerabilities and Disclosure

Read article
Decide with Jev: Turn AI Answers into Decisions with PHP Rules image

Decide with Jev: Turn AI Answers into Decisions with PHP Rules

Read article
Skuul: Open-Source School Management Built on Laravel image

Skuul: Open-Source School Management Built on Laravel

Read article
Laravel Read Replicas: Prevent Stale Reads After a Write image

Laravel Read Replicas: Prevent Stale Reads After a Write

Read article
Screenshot: Capture Images and PDFs with PHP and Laravel image

Screenshot: Capture Images and PDFs with PHP and Laravel

Read article
Reset Sticky Database Connections Between Laravel Queue Jobs image

Reset Sticky Database Connections Between Laravel Queue Jobs

Read article