YES - laravel escapes sql, preventing sql injections (if you use the Eloquent or Fluent Query Builder)