3 ms·
coarse locking is only a possibility at fairly small scales, unless your users like waiting. CSRF protection is the solution here as well. this entire article c
by oldmanjay 12y ago
coarse locking is only a possibility at fairly small scales, unless your users like waiting. CSRF protection is the solution here as well. this entire article could have one comment that says nothing more and it would perfect.
- snowwolf 12y agoWho said anything about course locking? Most databases support row level locking (think lock user row so each user cannot submit multiple orders at the same time). And I think you are misunderstanding CSRF. As the name implies it is protection against Cross Site attacks and will do nothing to help you prevent race conditions.