Laravel N+1 Query: 101 Queries for 50 Articles

<?php

// FILE: routes/web.php
// This is where you map URLs to behaviour.
// Laravel reads this file on every request.

use Illuminate\Http\Request;
use App\Http\Controllers\ArticleController;

// A simple closure route — great for prototyping or tiny endpoints
Route::get('/ping', function () {
    // Returns a JSON response — Laravel wraps the array automatically
    return response()->json([
        'status'  => 'alive',
        'version' => app()->version(), // pulls the Laravel version from the container
    ]);
});

// A resourceful route — maps 7 CRUD actions to one controller in one line
// GET /articles          -> ArticleController@index
// GET /articles/{id}     -> ArticleController@show
// POST /articles         -> ArticleController@store
// PUT /articles/{id}     -> ArticleController@update
// DELETE /articles/{id}  -> ArticleController@destroy
Route::resource('articles'

<?php

// FILE: app/Models/Article.php
// One class = one table. Laravel pluralises 'Article' to 'articles' automatically.

namespace App\Models;

use Illuminate\Database\Eloquent\Model;
use Illuminate\Database\Eloquent\Relations\BelongsTo;
use Illuminate\Database\Eloquent\Relations\HasMany;

class Article extends Model
{
    // Only these fields can be mass-assigned via Article::create([...]) or fill()
    // This prevents mass-assignment vulnerabilities — always define this
    protected $fillable = ['title', 'body', 'published_at', 'author_id'];

    // Cast 'published_at' to a Carbon datetime object automatically
    // so you can call $article->published_at->diffForHumans() etc.
    protected $casts = [
        'published_at' => 'datetime',
    ];

    // Relationship: an Article belongs to one Author (User)
    // Laravel infers the foreign key is 'author_id' by convention
    public function author(): BelongsTo
    {
        return $this->belongsTo(User::class, 'author_id');
    }

    // Relationship: an Article has many Comments
    public function comments(): HasMany
    {
        return $this->hasMany(Comment::class);
    }

    // A local scope — reusable query constraint
    // Usage: Article::published()->get()
    public function scopePublished($query)
    {
        return $query->whereNotNull('published_at')
                     ->where('published_at', '<=', now());
    }
}

// -------------------------------------------------------
// FILE: app/Http/Controllers/ArticleController.php
// Real-world usage: eager loading to avoid the N+1 problem

namespace App\Http\Controllers;

use App\Models\Article;
use Illuminate\Http\Request;

class ArticleController extends Controller
{
    public function index()
    {
        // with('author') eager-loads the author relationship in ONE extra query
        // instead of firing a new query per article (the N+1 problem)
        $publishedArticles = Article::published()
            ->with('author')           // eager load author
            ->withCount('comments')    // adds comments_count column to each result
            ->latest('published_at')   // ORDER BY published_at DESC
            ->paginate(15);            // automatically handles ?page= query string

        return view('articles.index', [\n            'articles' => $publishedArticles,\n        ]);
    }

    public function store(Request $request)
    {
        // Validate first — Laravel throws a 422 with JSON errors if this fails
        $validatedData = $request->validate([
            'title'        => 'required|string|max:200',
            'body'         => 'required|string',
            'published_at' => 'nullable|date',
        ]);

        // merge the authenticated user's ID — never trust a user-supplied author_id
        $article = Article::create(array_merge($validatedData, [\n            'author_id' => $request->user()->id,\n        ]));

        return redirect()->route('articles.show', $article)
                         ->with('success', 'Article published successfully.');
    }
}

{{-- FILE: resources/views/layouts/app.blade.php --}}
{{-- The master layout — every page on the site extends this --}}
<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <title>@yield('page-title', 'TheCodeForge') — My Blog</title>
</head>
<body>
    <nav>
        {{-- @auth only renders its contents if a user is logged in --}}
        @auth
            <span>Welcome, {{ auth()->user()->name }}</span>
            <a href="{{ route('logout') }}">Logout</a>
        @else
            <a href="{{ route('login') }}">Login</a>
        @endauth
    </nav>

    <main>
        {{-- @yield marks the slot that child views fill in --}}
        @yield('content')
    </main>
</body>
</html>


{{-- FILE: resources/views/articles/index.blade.php --}}
{{-- Child view — it extends the layout and fills the 'content' slot --}}
@extends('layouts.app')

@section('page-title', 'Latest Articles')

@section('content')
    <h1>Published Articles</h1>

    {{-- Flash message from the controller's redirect()->with('success', ...) --}}
    @if(session('success'))
        <div class="alert alert-success">
            {{ session('success') }}
        </div>
    @endif

    @forelse($articles as $article)
        <article>
            <h2>
                {{-- route() generates /articles/42 — no hardcoded URLs --}}
                <a href="{{ route('articles.show', $article) }}">
                    {{ $article->title }}  {{-- auto-escaped: safe against XSS --}}
                </a>
            </h2>

            <p class="meta">
                By {{ $article->author->name }}
                &middot;
                {{-- Carbon's diffForHumans() gives '3 days ago' style output --}}
                {{ $article->published_at->diffForHumans() }}
                &middot;
                {{ $article->comments_count }} comment{{ $article->comments_count !== 1 ? 's' : '' }}
            </p>

            <p>{{ Str::limit($article->body, 200) }}</p>
        </article>
    @empty
        {{-- @forelse's @empty block handles the zero-results state cleanly --}}\n        <p>No articles published yet. <a href=\"{{ route('articles.create') }}\">Write one?</a></p>\n    @endforelse\n\n    {{-- $articles->links() renders Bootstrap/Tailwind pagination automatically --}}\n    {{ $articles->links() }}\n@endsection",
        "output": "<!-- Rendered HTML sent to the browser (abbreviated): -->\n<!DOCTYPE html>\n<html lang=\"en\">\n<head>\n    <title>Latest Articles — My Blog</title>\n</head>\n<body>\n    <nav>\n        <a href=\"/login\">Login</a>  <!-- unauthenticated user -->\n    </nav>\n    <main>\n        <h1>Published Articles</h1>\n        <article>\n            <h2><a href=\"/articles/1\">Getting Started with Laravel</a></h2>\n            <p class=\"meta\">By Jane Doe &middot; 3 days ago &middot; 4 comments</p>\n            <p>Laravel is a web application framework with expressive, elegant syntax...</p>\n        </article>\n        <!-- ... 14 more articles ... -->\n        <!-- Pagination: « Previous  1 2 3  Next » -->\n    </main>\n</body>\n</html>"
      },
      "callout": {
        "type": "tip",
        "title": "Pro Tip — Use route() Everywhere:",
        "text": "Never hardcode URLs in Blade like href=\"/articles/42\". Always use route('articles.show', $article). When you rename a URI in routes/web.php, every link in every template updates automatically. Hardcoded URLs are the reason refactors become nightmares."
      }
    },
    {
      "heading": "Artisan CLI — The Command-Line Superpower You'll Use Every Day",
      "content": "Every Laravel project ships with Artisan, a CLI tool that handles the repetitive parts of development so you don't have to. It's not just a code generator — it's your interface to the application itself.\n\nThe commands you'll use daily are `make:model`, `make:controller`, `make:migration`, and `make:request`. The `-mrc` flag on `make:model` generates the model, migration, resource controller, and form request all at once — four files with one command. That's a lot of boilerplate gone in seconds.\n\nBeyond generation, Artisan lets you run migrations (`migrate`, `migrate:rollback`, `migrate:fresh`), manage the cache (`cache:clear`, `config:cache`, `route:cache`), tail logs, run scheduled tasks, and drop into a REPL called Tinker. Tinker is a REPL that boots your entire Laravel app — you can query your database, test Eloquent queries, and call any service from the command line without writing a throwaway script.\n\nYou can also write your own Artisan commands. Any repetitive task — importing a CSV, recalculating stats, sending a digest email — can become a first-class `php artisan` command, schedulable via Laravel's Scheduler and monitored via Laravel Horizon or Telescope.\n\nOne hidden gem: `php artisan route:list` shows all registered routes along with their middleware and controller methods. Super useful when you're lost in a new codebase or debugging a 404.",
      "production_insight": "Never run php artisan config:cache or route:cache on local development. These commands flatten all config into a single cached file, so changes to .env or routes won't reflect until you clear the cache. Use them only in production to improve performance. If you accidentally run them, use php artisan config:clear && php artisan route:clear && php artisan cache:clear.\nTinker is a powerful debugging tool — you can even interact with the database in production if you're careful. But never run Tinker in production without a read-only approach unless you understand the consequences.",
      "key_takeaway": "Artisan's make:model -mrc --requests generates 5 files in one command — master this for speed.\nTinker is the fastest way to test Eloquent queries before writing them in a controller.\nCache config and routes only on production — never on local.",
      "code": {
        "language": "php",
        "filename": "ArtisanWorkflow.php",
        "code": "<?php\n\n/*\n |------------------------------------------------------------------\n | TERMINAL SESSION — typical Laravel development workflow\n |------------------------------------------------------------------\n */\n\n// 1. Create a new Laravel project\n// composer create-project laravel/laravel blog-platform\n// cd blog-platform\n\n// 2. Generate the Article model + migration + resource controller + form request in one shot\n// php artisan make:model Article -mrc --requests\n//\n// This creates:\n//   app/Models/Article.php\n//   database/migrations/2024_01_15_create_articles_table.php\n//   app/Http/Controllers/ArticleController.php  (with index/create/store/show/edit/update/destroy stubs)\n//   app/Http/Requests/StoreArticleRequest.php\n//   app/Http/Requests/UpdateArticleRequest.php\n\n\n// 3. The generated migration — you fill in the columns:\n\n// FILE: database/migrations/2024_01_15_000000_create_articles_table.php\n\nuse Illuminate\\Database\\Migrations\\Migration;\nuse Illuminate\\Database\\Schema\\Blueprint;\nuse Illuminate\\Support\\Facades\\Schema;\n\nreturn new class extends Migration\n{\n    public function up(): void\n    {\n        Schema::create('articles', function (Blueprint $table) {\n            $table->id();                           // BIGINT UNSIGNED AUTO_INCREMENT PRIMARY KEY\n            $table->foreignId('author_id')          // BIGINT UNSIGNED\n                  ->constrained('users')            // adds FOREIGN KEY referencing users.id\n                  ->cascadeOnDelete();              // delete articles when user is deleted\n            $table->string('title', 200);\n            $table->text('body');\n            $table->timestamp('published_at')->nullable(); // null = draft\n            $table->timestamps();                   // adds created_at and updated_at\n        });\n    }

    public function down(): void
    {
        // Rollback: drop the table cleanly
        Schema::dropIfExists('articles');
    }
};


// 4. The generated Form Request — move validation OUT of the controller:

// FILE: app/Http/Requests/StoreArticleRequest.php

namespace App\Http\Requests;

use Illuminate\Foundation\Http\FormRequest;

class StoreArticleRequest extends FormRequest
{
    // authorize() decides WHO can make this request
    // Return false to send a 403 Forbidden automatically
    public function authorize(): bool
    {
        return $this->user() !== null; // any logged-in user can create articles
    }

    // rules() defines validation — same rules as $request->validate() but reusable
    public function rules(): array
    {
        return [
            'title'        => ['required', 'string', 'max:200'],
            'body'         => ['required', 'string', 'min:50'],
            'published_at' => ['nullable', 'date', 'after_or_equal:today'],
        ];
    }

    // Optional: custom error messages
    public function messages(): array
    {
        return [
            'body.min' => 'Articles must be at least 50 characters long — give your readers something!',
        ];
    }
}

<?php

// FILE: app/Providers/AuthServiceProvider.php
// Define Gates and register Policies

use Illuminate\Support\Facades\Gate;
use App\Models\Article;
use App\Policies\ArticlePolicy;

class AuthServiceProvider extends ServiceProvider
{
    protected $policies = [
        Article::class => ArticlePolicy::class,
    ];

    public function boot()
    {
        $this->registerPolicies();

        // Define a Gate directly (alternative to Policy class)
        Gate::define('update-article', function ($user, $article) {
            return $user->id === $article->author_id;
        });
    }
}

// FILE: app/Policies/ArticlePolicy.php

namespace App\Policies;

use App\Models\User;
use App\Models\Article;

class ArticlePolicy
{
    public function update(User $user, Article $article): bool
    {\n        return $user->id === $article->author_id;\n    }

    public function delete(User $user, Article $article): bool
    {\n        return $user->id === $article->author_id;\n    }

    public function create(User $user): bool
    {
        // Any authenticated user can create an article
        return true;
    }
}

// FILE: app/Http/Controllers/ArticleController.php
// Authorize inside the controller

namespace App\Http\Controllers;

use App\Models\Article;
use App\Http\Requests\StoreArticleRequest;

class ArticleController extends Controller
{
    public function edit(Article $article)
    {
        // This calls the update policy method
        $this->authorize('update', $article);

        return view('articles.edit', compact('article'));
    }

    public function destroy(Article $article)
    {
        $this->authorize('delete', $article);

        $article->delete();

        return redirect()->route('articles.index')
                         ->with('success', 'Article deleted.');
    }
}

// io.thecodeforge — php tutorial

// Horrible pre-Laravel pattern — avoid this
$db = mysqli_connect('localhost', 'root', '', 'users');
$result = mysqli_query($db, "SELECT * FROM posts WHERE user_id = $_SESSION['user_id']");
echo "<h1>Your Posts</h1>";
while ($row = mysqli_fetch_assoc($result)) {
    echo "<li>$row[title]</li>";
}

// Laravel way — lean and testable
Route::middleware('auth')->get('/posts', function () {
    $posts = Post::where('user_id', auth()->id())->get();
    return view('posts.index', compact('posts'));
});

// io.thecodeforge — php tutorial

// What your local environment must have
$requiredPhpVersion = '8.1.0';
$currentPhpVersion = PHP_VERSION;

if (version_compare($currentPhpVersion, $requiredPhpVersion, '<')) {
    die("Upgrade PHP. You're on $currentPhpVersion, need >= $requiredPhpVersion");
}

echo "PHP version: $currentPhpVersion — OK\n";
echo "Composer: " . (shell_exec('which composer') ? 'installed' : 'missing') . "\n";
echo "Node/NPM: " . (shell_exec('which node') ? 'installed' : 'optional') . "\n";

// Output if everything is healthy
// PHP version: 8.2.12 — OK
// Composer: installed
// Node/NPM: optional

// io.thecodeforge — php tutorial

// Eager loading to avoid N+1 queries
$posts = Post::with(['comments.user', 'tags'])->where('published', true)->get();

// Cache the result for 10 minutes
$posts = Cache::remember('published_posts_with_comments', 600, function () {
    return Post::with(['comments.user', 'tags'])->where('published', true)->get();
});

// A migration that rolls back safely
Schema::create('audit_logs', function (Blueprint $table) {
    $table->id();
    $table->morphs('loggable');  // polymorphic relation
    $table->json('payload');
    $table->timestamps();
});

// io.thecodeforge — php tutorial

// Example Laravel Form Request class
<?php

namespace App\Http\Requests;

use Illuminate\Foundation\Http\FormRequest;

class StoreUserRequest extends FormRequest
{
    public function authorize(): bool
    {
        return true; // Or check user permissions
    }

    public function rules(): array
    {
        return [
            'email' => 'required|email|unique:users,email',
            'password' => 'required|min:8|confirmed',
        ];
    }

    public function messages(): array
    {
        return [
            'email.required' => 'We need your email address.',
            'email.unique' => 'This email is already taken.',
        ];
    }
}