Laravel 用户资料更新教程：从表单到控制器

<input type="name" class="form-control" value="{{auth()->user()->name}}" id="inputName" placeholder="Name">
<input type="email" class="form-control" value="{{auth()->user()->email}}" id="inputEmail" placeholder="Email">
<textarea class="form-control" value="{{auth()->user()->edcuation}}" name="education" id="inputExperience" placeholder="Experience"></textarea>
<input type="text" class="form-control" value="{{auth()->user()->skills}}" name="skills" id="inputSkills" placeholder="Skills">

<form class="form-horizontal" action="{{ route('user.update', auth()->id()) }}" method="POST">
    @csrf
    @method('PUT') {{-- 使用PUT方法模拟更新操作 --}}
    <div class="form-group row">
        <label for="inputName" class="col-sm-2 col-form-label">Name</label>
        <div class="col-sm-10">
            <input type="text" class="form-control" name="name" value="{{ old('name', auth()->user()->name) }}" id="inputName" placeholder="Name">
        </div>
    </div>
    <div class="form-group row">
        <label for="inputEmail" class="col-sm-2 col-form-label">Email</label>
        <div class="col-sm-10">
            <input type="email" class="form-control" name="email" value="{{ old('email', auth()->user()->email) }}" id="inputEmail" placeholder="Email">
        </div>
    </div>
    <div class="form-group row">
        <label for="inputEducation" class="col-sm-2 col-form-label">Education</label>
        <div class="col-sm-10">
            <textarea class="form-control" name="education" id="inputEducation" placeholder="Education">{{ old('education', auth()->user()->education) }}</textarea>
        </div>
    </div>
    <div class="form-group row">
        <label for="inputSkills" class="col-sm-2 col-form-label">Skills</label>
        <div class="col-sm-10">
            <input type="text" class="form-control" name="skills" value="{{ old('skills', auth()->user()->skills) }}" id="inputSkills" placeholder="Skills">
        </div>
    </div>
    <div class="form-group row">
        <div class="offset-sm-2 col-sm-10">
            <button type="submit" class="btn btn-danger">Submit</button>
        </div>
    </div>
</form>

class UserController extends Controller
{
    public function update(Request $request, $id)
    {
        $input = $request->all();
        $user = User::find($id);
        $user->fill($input)->save(); // 问题所在
        toastr()->success('Your details have been updated successfully!');
        return back();
    }
}

<?php

namespace App\Http\Controllers;

use Illuminate\Http\Request;
use App\Models\User;
use Illuminate\Validation\Rule; // 引入Rule用于唯一性验证

class UserController extends Controller
{
    public function update(Request $request, $id)
    {
        // 1. 数据验证 (强烈推荐且必要)
        $request->validate([
            'name' => ['required', 'string', 'max:255'],
            'email' => [
                'required',
                'string',
                'email',
                'max:255',
                Rule::unique('users')->ignore($id), // 确保邮箱在更新时可以保持不变或更改为其他唯一值
            ],
            'education' => ['nullable', 'string', 'max:255'], // 允许为空
            'skills' => ['nullable', 'string', 'max:255'],
        ]);

        // 2. 获取用户实例，如果不存在则抛出404异常
        $user = User::findOrFail($id);

        // 3. 过滤请求数据，只允许更新fillable中定义的字段，防止批量赋值漏洞
        $dataToUpdate = $request->only(['name', 'email', 'education', 'skills']);

        // 4. 更新用户数据
        $user->update($dataToUpdate); // 使用update方法直接更新

        toastr()->success('您的资料已成功更新！');
        return back();
    }
}

class User extends Authenticatable
{
    // ...
    protected $fillable = [
        'name',
        'email',
        'password',
        'skills',
        'education',
    ];
    // ...
}

// routes/web.php
use App\Http\Controllers\UserController;
use Illuminate\Support\Facades\Route;

Route::middleware(['auth'])->group(function () {
    // ... 其他路由
    Route::put('/user/{user}', [UserController::class, 'update'])->name('user.update');
});