Apakah Laravel memvalidasi SQL

YES - laravel escapes sql, preventing sql injections 
(if you use the Eloquent or Fluent Query Builder)
Literate Lentil