חזרה ללוח
D48אומת בקודP0
Seat reservation race (read-check-write, no lock/unique) → double-booking
B · unauth-POSTS3 · destructiveCORT2
תיקון
מורכבות high65%
Seat reservation checks and writes without a lock, so two buyers can end up booking the same seat.
Seater.php:61, Checkout.php:200, Tickets.php:171
תיק מלא
ממצאים קשורים
D15 · `lcf_seater` engine table: no schema-…D45 · `ajax_seat_state` lets an anonymous u…D43 · Price tampering: client `seatPrice` t…D60 · `execute_seater_cleaner` `return` not…D65 · `execute_seater_updater` non-atomic J…D73 · `lcf_seater` grows unbounded (cleaner…D68 · `occupy()` re-marks ALL seats per tic…