Skip to content
ביקורת אבטחה
חזרה ללוח
D64אומת בקודP1

No DB transaction over order+tickets+seater → charged-but-undelivered

D · internalS4 · server/DBCORT2
תיקון
70%
מורכבות high

Order, tickets, and seat updates aren't wrapped in one transaction, risking charged-but-undelivered orders.

Checkout.php:515

תיק מלא
ממצאים קשורים
D48 · Seat reservation race (read-check-wri…D61 · `seater_cleaner`/`seater_updater` run…D65 · `execute_seater_updater` non-atomic J…D67 · `ImagickException` caught in wrong na…D68 · `occupy()` re-marks ALL seats per tic…