{"action":"created","issue":{"url":"https://api.github.com/repos/laravel/framework/issues/6118","labels_url":"https://api.github.com/repos/laravel/framework/issues/6118/labels{/name}","comments_url":"https://api.github.com/repos/laravel/framework/issues/6118/comments","events_url":"https://api.github.com/repos/laravel/framework/issues/6118/events","html_url":"https://github.com/laravel/framework/issues/6118","id":45962196,"number":6118,"title":"[5.0] route model binding runing before middleware","user":{"login":"alioygur","id":628322,"avatar_url":"https://avatars.githubusercontent.com/u/628322?v=3","gravatar_id":"","url":"https://api.github.com/users/alioygur","html_url":"https://github.com/alioygur","followers_url":"https://api.github.com/users/alioygur/followers","following_url":"https://api.github.com/users/alioygur/following{/other_user}","gists_url":"https://api.github.com/users/alioygur/gists{/gist_id}","starred_url":"https://api.github.com/users/alioygur/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/alioygur/subscriptions","organizations_url":"https://api.github.com/users/alioygur/orgs","repos_url":"https://api.github.com/users/alioygur/repos","events_url":"https://api.github.com/users/alioygur/events{/privacy}","received_events_url":"https://api.github.com/users/alioygur/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/laravel/framework/labels/bug","name":"bug","color":"fc2929"}],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":49,"created_at":"2014-10-16T08:49:49Z","updated_at":"2015-10-21T16:34:17Z","closed_at":"2015-10-21T13:33:35Z","body":"Route model binding runing before middleware, this is bug."},"comment":{"url":"https://api.github.com/repos/laravel/framework/issues/comments/149953852","html_url":"https://github.com/laravel/framework/issues/6118#issuecomment-149953852","issue_url":"https://api.github.com/repos/laravel/framework/issues/6118","id":149953852,"user":{"login":"malhal","id":916912,"avatar_url":"https://avatars.githubusercontent.com/u/916912?v=3","gravatar_id":"","url":"https://api.github.com/users/malhal","html_url":"https://github.com/malhal","followers_url":"https://api.github.com/users/malhal/followers","following_url":"https://api.github.com/users/malhal/following{/other_user}","gists_url":"https://api.github.com/users/malhal/gists{/gist_id}","starred_url":"https://api.github.com/users/malhal/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/malhal/subscriptions","organizations_url":"https://api.github.com/users/malhal/orgs","repos_url":"https://api.github.com/users/malhal/repos","events_url":"https://api.github.com/users/malhal/events{/privacy}","received_events_url":"https://api.github.com/users/malhal/received_events","type":"User","site_admin":false},"created_at":"2015-10-21T16:34:17Z","updated_at":"2015-10-21T16:34:17Z","body":"Yeh I wouldn't use the DDoS argument for trying to get this fixed since there likely are a high number of other candidates, and remember all an attacker would need to do is log in with a fake account and then its the same problem. This is more about a design flaw, that plays with the mind of the coder who cares, who likely knows about trying to be as efficient with database comms as possible, and this problem is like a big fat middle finger in their face ;-)"}}