Laravel 2,157 has one validator, reached through $request->validate(), a form request class, or Validator::make(), and all three fail the same way: a browser is redirected back with the errors, and a JSON client gets a 422. This section validates the bookshop's review form and its staff-only product form on Laravel 13.33, with the catalog of Route Model Binding in SQLite 4,756 and an is_admin flag on users. Outputs come from php artisan serve --port=8308; $B is http://127.0.0.1:8308 and $H is the Sec-Fetch-Site: same-origin header that satisfies CSRF protection (CSRF Protection).
