search
HomeBackend DevelopmentPHP TutorialPHP optimistic locking combined with transaction deduction balance failed: How to ensure that the balance is correctly deducted in concurrency situations?

PHP optimistic locking combined with transaction deduction balance failed: How to ensure that the balance is correctly deducted in concurrency situations?

PHP Optimistic Locking Combined with Database Transactions to Deduct Balance: Problem Analysis and Solution

This article discusses how to avoid concurrency problems that lead to failure of balance deduction or inconsistent data when using optimistic locks and database transactions for balance deduction in PHP environment. We will analyze the error code and provide the correct solution.

Problem code analysis and error reasons:

The following code snippet attempts to ensure the correctness of balance deductions in concurrent environments through optimistic locks and transactions, but has flaws:

Error code snippet 1:

 public function userbuy()
{
    $user = $this->getuser(); 
    $oldmoney = $user['balance']; 
    $orderoffer = $this->getordermoney($orderid); 
    if($oldmoney error('Insufficient Account Balance');

    //Optimistic locking solution (wrong points)
    $newmoney = $oldmoney - $orderoffer['price']; 
    $newuser = smsuser::where(['id' => $user['id'],'balance' => $oldmoney])->find();
    if(!$newuser) $this->error('user does not exist');
    //Open database transaction db::transaction(function () use($newuser,$orderid,$newmoney){
        $newuser->balance = $newmoney;
        $result = $newuser->save();
        if(!$result) $this->error('Save balance failed');

         //Create an order code
         //Deduct inventory code
         //Create user balance change record code    
        db::commit(); //Commit transaction (excessive operation)        
    });
}

Cause of error:

  1. Optimistic lock position error: find() method is executed outside the transaction. Multiple concurrent requests get the same $oldmoney value. Only save() operation of the first request succeeds, and subsequent requests fail because balance is no longer equal to $oldmoney . The conditional judgment of optimistic locking should be made in update statement.

  2. db::commit() redundant: db::transaction() method itself will automatically commit the transaction unless an exception rollback occurs. Manual call to db::commit() is redundant and may mask errors.

Error code snippet 2:

 public function userbuy()
{
    // ... (The code is the same as above, the part is omitted) ...

    //Optimistic locking solution (wrong points)
    $newUser->balance = $newMoney;
    $result = $newUser->save();
    if(!$result) $this->error('Save balance failed');

    //Open database transaction (Error)
    Db::transaction(function() use(){
         //Create an order code
         //Deduct inventory code
         //Create user balance change record code    
        Db::commit(); //Commit transaction (excessive operation)         
    });
}

Cause of error:

The balance update operation is executed outside the transaction. If subsequent operations (creating orders, deducting inventory, etc.) fail, the balance has been updated, resulting in inconsistent data.

Correct solution:

The conditional judgment of optimistic locking should be placed in the database update statement, and all operations that need to ensure atomicity should be included in the same transaction.

Correct code:

 public function userbuy()
{
    $user = $this->getuser();
    $oldmoney = $user['balance'];
    $orderoffer = $this->getordermoney($orderid);
    if ($oldmoney error('Insufficient Account Balance');

    $newmoney = $oldmoney - $orderoffer['price'];

    // Use optimistic locking mechanisms for databases (such as MySQL)
    $affectedRows = smsuser::where('id', $user['id'])
        ->where('balance', $oldmoney)
        ->update(['balance' => $newmoney]);

    if ($affectedRows === 0) {
        $this->error('Balance update failed, there may be concurrent conflict'); // Optimistic lock failed return;
    }

    // Enable the transaction, including all subsequent operations db::transaction(function () use ($orderid, $newmoney, $user) {
        // Create an order code
        // Deduct inventory code
        // Create user balance change record code (make sure these operations are also included in the transaction)
    });
}

This solution places balance updates and subsequent operations in the same transaction and uses the optimistic locking mechanism provided by the database to ensure data consistency. If any operation fails, the transaction will automatically roll back to ensure data security. Avoid manually committing transactions, simplifying code and improving readability. If the number of rows affected by the update statement is 0, it means that the optimistic lock fails and concurrent conflicts need to be handled. Such situations can be handled using retry mechanisms or other strategies. The specific optimism lock implementation depends on the database system used.

The above is the detailed content of PHP optimistic locking combined with transaction deduction balance failed: How to ensure that the balance is correctly deducted in concurrency situations?. For more information, please follow other related articles on the PHP Chinese website!

Statement
The content of this article is voluntarily contributed by netizens, and the copyright belongs to the original author. This site does not assume corresponding legal responsibility. If you find any content suspected of plagiarism or infringement, please contact admin@php.cn
How can you protect against Cross-Site Scripting (XSS) attacks related to sessions?How can you protect against Cross-Site Scripting (XSS) attacks related to sessions?Apr 23, 2025 am 12:16 AM

To protect the application from session-related XSS attacks, the following measures are required: 1. Set the HttpOnly and Secure flags to protect the session cookies. 2. Export codes for all user inputs. 3. Implement content security policy (CSP) to limit script sources. Through these policies, session-related XSS attacks can be effectively protected and user data can be ensured.

How can you optimize PHP session performance?How can you optimize PHP session performance?Apr 23, 2025 am 12:13 AM

Methods to optimize PHP session performance include: 1. Delay session start, 2. Use database to store sessions, 3. Compress session data, 4. Manage session life cycle, and 5. Implement session sharing. These strategies can significantly improve the efficiency of applications in high concurrency environments.

What is the session.gc_maxlifetime configuration setting?What is the session.gc_maxlifetime configuration setting?Apr 23, 2025 am 12:10 AM

Thesession.gc_maxlifetimesettinginPHPdeterminesthelifespanofsessiondata,setinseconds.1)It'sconfiguredinphp.iniorviaini_set().2)Abalanceisneededtoavoidperformanceissuesandunexpectedlogouts.3)PHP'sgarbagecollectionisprobabilistic,influencedbygc_probabi

How do you configure the session name in PHP?How do you configure the session name in PHP?Apr 23, 2025 am 12:08 AM

In PHP, you can use the session_name() function to configure the session name. The specific steps are as follows: 1. Use the session_name() function to set the session name, such as session_name("my_session"). 2. After setting the session name, call session_start() to start the session. Configuring session names can avoid session data conflicts between multiple applications and enhance security, but pay attention to the uniqueness, security, length and setting timing of session names.

How often should you regenerate session IDs?How often should you regenerate session IDs?Apr 23, 2025 am 12:03 AM

The session ID should be regenerated regularly at login, before sensitive operations, and every 30 minutes. 1. Regenerate the session ID when logging in to prevent session fixed attacks. 2. Regenerate before sensitive operations to improve safety. 3. Regular regeneration reduces long-term utilization risks, but the user experience needs to be weighed.

How do you set the session cookie parameters in PHP?How do you set the session cookie parameters in PHP?Apr 22, 2025 pm 05:33 PM

Setting session cookie parameters in PHP can be achieved through the session_set_cookie_params() function. 1) Use this function to set parameters, such as expiration time, path, domain name, security flag, etc.; 2) Call session_start() to make the parameters take effect; 3) Dynamically adjust parameters according to needs, such as user login status; 4) Pay attention to setting secure and httponly flags to improve security.

What is the main purpose of using sessions in PHP?What is the main purpose of using sessions in PHP?Apr 22, 2025 pm 05:25 PM

The main purpose of using sessions in PHP is to maintain the status of the user between different pages. 1) The session is started through the session_start() function, creating a unique session ID and storing it in the user cookie. 2) Session data is saved on the server, allowing data to be passed between different requests, such as login status and shopping cart content.

How can you share sessions across subdomains?How can you share sessions across subdomains?Apr 22, 2025 pm 05:21 PM

How to share a session between subdomains? Implemented by setting session cookies for common domain names. 1. Set the domain of the session cookie to .example.com on the server side. 2. Choose the appropriate session storage method, such as memory, database or distributed cache. 3. Pass the session ID through cookies, and the server retrieves and updates the session data based on the ID.

See all articles

Hot AI Tools

Undresser.AI Undress

Undresser.AI Undress

AI-powered app for creating realistic nude photos

AI Clothes Remover

AI Clothes Remover

Online AI tool for removing clothes from photos.

Undress AI Tool

Undress AI Tool

Undress images for free

Clothoff.io

Clothoff.io

AI clothes remover

Video Face Swap

Video Face Swap

Swap faces in any video effortlessly with our completely free AI face swap tool!

Hot Tools

Notepad++7.3.1

Notepad++7.3.1

Easy-to-use and free code editor

Dreamweaver CS6

Dreamweaver CS6

Visual web development tools

ZendStudio 13.5.1 Mac

ZendStudio 13.5.1 Mac

Powerful PHP integrated development environment

MantisBT

MantisBT

Mantis is an easy-to-deploy web-based defect tracking tool designed to aid in product defect tracking. It requires PHP, MySQL and a web server. Check out our demo and hosting services.

SublimeText3 Mac version

SublimeText3 Mac version

God-level code editing software (SublimeText3)