[Doctrine Bridge] fix DBAL session handler according to PdoSessionHandler
This commit is contained in:
parent
00d707f76c
commit
a0e1d4d5d7
@ -12,6 +12,8 @@
|
|||||||
namespace Symfony\Bridge\Doctrine\HttpFoundation;
|
namespace Symfony\Bridge\Doctrine\HttpFoundation;
|
||||||
|
|
||||||
use Doctrine\DBAL\Connection;
|
use Doctrine\DBAL\Connection;
|
||||||
|
use Doctrine\DBAL\Driver\DriverException;
|
||||||
|
use Doctrine\DBAL\Platforms\SQLServer2008Platform;
|
||||||
|
|
||||||
/**
|
/**
|
||||||
* DBAL based session storage.
|
* DBAL based session storage.
|
||||||
@ -146,13 +148,10 @@ class DbalSessionHandler implements \SessionHandlerInterface
|
|||||||
*/
|
*/
|
||||||
public function write($sessionId, $data)
|
public function write($sessionId, $data)
|
||||||
{
|
{
|
||||||
// Session data can contain non binary safe characters so we need to encode it.
|
|
||||||
$encoded = base64_encode($data);
|
$encoded = base64_encode($data);
|
||||||
|
|
||||||
// We use a MERGE SQL query when supported by the database.
|
|
||||||
// Otherwise we have to use a transactional DELETE followed by INSERT to prevent duplicate entries under high concurrency.
|
|
||||||
|
|
||||||
try {
|
try {
|
||||||
|
// We use a single MERGE SQL query when supported by the database.
|
||||||
$mergeSql = $this->getMergeSql();
|
$mergeSql = $this->getMergeSql();
|
||||||
|
|
||||||
if (null !== $mergeSql) {
|
if (null !== $mergeSql) {
|
||||||
@ -165,15 +164,21 @@ class DbalSessionHandler implements \SessionHandlerInterface
|
|||||||
return true;
|
return true;
|
||||||
}
|
}
|
||||||
|
|
||||||
$this->con->beginTransaction();
|
$updateStmt = $this->con->prepare(
|
||||||
|
"UPDATE $this->table SET $this->dataCol = :data, $this->timeCol = :time WHERE $this->idCol = :id"
|
||||||
try {
|
|
||||||
$deleteStmt = $this->con->prepare(
|
|
||||||
"DELETE FROM $this->table WHERE $this->idCol = :id"
|
|
||||||
);
|
);
|
||||||
$deleteStmt->bindParam(':id', $sessionId, \PDO::PARAM_STR);
|
$updateStmt->bindParam(':id', $sessionId, \PDO::PARAM_STR);
|
||||||
$deleteStmt->execute();
|
$updateStmt->bindParam(':data', $encoded, \PDO::PARAM_STR);
|
||||||
|
$updateStmt->bindValue(':time', time(), \PDO::PARAM_INT);
|
||||||
|
$updateStmt->execute();
|
||||||
|
|
||||||
|
// When MERGE is not supported, like in Postgres, we have to use this approach that can result in
|
||||||
|
// duplicate key errors when the same session is written simultaneously. We can just catch such an
|
||||||
|
// error and re-execute the update. This is similar to a serializable transaction with retry logic
|
||||||
|
// on serialization failures but without the overhead and without possible false positives due to
|
||||||
|
// longer gap locking.
|
||||||
|
if (!$updateStmt->rowCount()) {
|
||||||
|
try {
|
||||||
$insertStmt = $this->con->prepare(
|
$insertStmt = $this->con->prepare(
|
||||||
"INSERT INTO $this->table ($this->idCol, $this->dataCol, $this->timeCol) VALUES (:id, :data, :time)"
|
"INSERT INTO $this->table ($this->idCol, $this->dataCol, $this->timeCol) VALUES (:id, :data, :time)"
|
||||||
);
|
);
|
||||||
@ -181,13 +186,20 @@ class DbalSessionHandler implements \SessionHandlerInterface
|
|||||||
$insertStmt->bindParam(':data', $encoded, \PDO::PARAM_STR);
|
$insertStmt->bindParam(':data', $encoded, \PDO::PARAM_STR);
|
||||||
$insertStmt->bindValue(':time', time(), \PDO::PARAM_INT);
|
$insertStmt->bindValue(':time', time(), \PDO::PARAM_INT);
|
||||||
$insertStmt->execute();
|
$insertStmt->execute();
|
||||||
|
|
||||||
$this->con->commit();
|
|
||||||
} catch (\Exception $e) {
|
} catch (\Exception $e) {
|
||||||
$this->con->rollback();
|
$driverException = $e->getPrevious();
|
||||||
|
// Handle integrity violation SQLSTATE 23000 (or a subclass like 23505 in Postgres) for duplicate keys
|
||||||
|
// DriverException only available since DBAL 2.5
|
||||||
|
if (
|
||||||
|
($driverException instanceof DriverException && 0 === strpos($driverException->getSQLState(), '23')) ||
|
||||||
|
($driverException instanceof \PDOException && 0 === strpos($driverException->getCode(), '23'))
|
||||||
|
) {
|
||||||
|
$updateStmt->execute();
|
||||||
|
} else {
|
||||||
throw $e;
|
throw $e;
|
||||||
}
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
} catch (\Exception $e) {
|
} catch (\Exception $e) {
|
||||||
throw new \RuntimeException(sprintf('Exception was thrown when trying to write the session data: %s', $e->getMessage()), 0, $e);
|
throw new \RuntimeException(sprintf('Exception was thrown when trying to write the session data: %s', $e->getMessage()), 0, $e);
|
||||||
}
|
}
|
||||||
@ -212,12 +224,13 @@ class DbalSessionHandler implements \SessionHandlerInterface
|
|||||||
// DUAL is Oracle specific dummy table
|
// DUAL is Oracle specific dummy table
|
||||||
return "MERGE INTO $this->table USING DUAL ON ($this->idCol = :id) " .
|
return "MERGE INTO $this->table USING DUAL ON ($this->idCol = :id) " .
|
||||||
"WHEN NOT MATCHED THEN INSERT ($this->idCol, $this->dataCol, $this->timeCol) VALUES (:id, :data, :time) " .
|
"WHEN NOT MATCHED THEN INSERT ($this->idCol, $this->dataCol, $this->timeCol) VALUES (:id, :data, :time) " .
|
||||||
"WHEN MATCHED THEN UPDATE SET $this->dataCol = :data";
|
"WHEN MATCHED THEN UPDATE SET $this->dataCol = :data, $this->timeCol = :time";
|
||||||
case 'mssql':
|
case $this->con->getDatabasePlatform() instanceof SQLServer2008Platform:
|
||||||
// MS SQL Server requires MERGE be terminated by semicolon
|
// MERGE is only available since SQL Server 2008 and must be terminated by semicolon
|
||||||
return "MERGE INTO $this->table USING (SELECT 'x' AS dummy) AS src ON ($this->idCol = :id) " .
|
// It also requires HOLDLOCK according to http://weblogs.sqlteam.com/dang/archive/2009/01/31/UPSERT-Race-Condition-With-MERGE.aspx
|
||||||
|
return "MERGE INTO $this->table WITH (HOLDLOCK) USING (SELECT 1 AS dummy) AS src ON ($this->idCol = :id) " .
|
||||||
"WHEN NOT MATCHED THEN INSERT ($this->idCol, $this->dataCol, $this->timeCol) VALUES (:id, :data, :time) " .
|
"WHEN NOT MATCHED THEN INSERT ($this->idCol, $this->dataCol, $this->timeCol) VALUES (:id, :data, :time) " .
|
||||||
"WHEN MATCHED THEN UPDATE SET $this->dataCol = :data;";
|
"WHEN MATCHED THEN UPDATE SET $this->dataCol = :data, $this->timeCol = :time;";
|
||||||
case 'sqlite':
|
case 'sqlite':
|
||||||
return "INSERT OR REPLACE INTO $this->table ($this->idCol, $this->dataCol, $this->timeCol) VALUES (:id, :data, :time)";
|
return "INSERT OR REPLACE INTO $this->table ($this->idCol, $this->dataCol, $this->timeCol) VALUES (:id, :data, :time)";
|
||||||
}
|
}
|
||||||
|
@ -20,14 +20,11 @@ use Doctrine\DBAL\Schema\Schema;
|
|||||||
*/
|
*/
|
||||||
final class DbalSessionHandlerSchema extends Schema
|
final class DbalSessionHandlerSchema extends Schema
|
||||||
{
|
{
|
||||||
private $tableName;
|
|
||||||
|
|
||||||
public function __construct($tableName = 'sessions')
|
public function __construct($tableName = 'sessions')
|
||||||
{
|
{
|
||||||
parent::__construct();
|
parent::__construct();
|
||||||
|
|
||||||
$this->tableName = $tableName;
|
$this->addSessionTable($tableName);
|
||||||
$this->addSessionTable();
|
|
||||||
}
|
}
|
||||||
|
|
||||||
public function addToSchema(Schema $schema)
|
public function addToSchema(Schema $schema)
|
||||||
@ -37,9 +34,9 @@ final class DbalSessionHandlerSchema extends Schema
|
|||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
private function addSessionTable()
|
private function addSessionTable($tableName)
|
||||||
{
|
{
|
||||||
$table = $this->createTable($this->tableName);
|
$table = $this->createTable($tableName);
|
||||||
$table->addColumn('sess_id', 'string');
|
$table->addColumn('sess_id', 'string');
|
||||||
$table->addColumn('sess_data', 'text')->setNotNull(true);
|
$table->addColumn('sess_data', 'text')->setNotNull(true);
|
||||||
$table->addColumn('sess_time', 'integer')->setNotNull(true)->setUnsigned(true);
|
$table->addColumn('sess_time', 'integer')->setNotNull(true)->setUnsigned(true);
|
||||||
|
@ -173,7 +173,7 @@ class PdoSessionHandler implements \SessionHandlerInterface
|
|||||||
$encoded = base64_encode($data);
|
$encoded = base64_encode($data);
|
||||||
|
|
||||||
try {
|
try {
|
||||||
// We use a MERGE SQL query when supported by the database.
|
// We use a single MERGE SQL query when supported by the database.
|
||||||
$mergeSql = $this->getMergeSql();
|
$mergeSql = $this->getMergeSql();
|
||||||
|
|
||||||
if (null !== $mergeSql) {
|
if (null !== $mergeSql) {
|
||||||
@ -194,10 +194,11 @@ class PdoSessionHandler implements \SessionHandlerInterface
|
|||||||
$updateStmt->bindValue(':time', time(), \PDO::PARAM_INT);
|
$updateStmt->bindValue(':time', time(), \PDO::PARAM_INT);
|
||||||
$updateStmt->execute();
|
$updateStmt->execute();
|
||||||
|
|
||||||
// Since Postgres does not support MERGE (without custom stored procedure), we have to use this approach
|
// When MERGE is not supported, like in Postgres, we have to use this approach that can result in
|
||||||
// that can result in duplicate key errors when the same session is written simultaneously. We can just
|
// duplicate key errors when the same session is written simultaneously. We can just catch such an
|
||||||
// ignore such an error because either the data did not change anyway or which data is written does not
|
// error and re-execute the update. This is similar to a serializable transaction with retry logic
|
||||||
// matter as proper locking to serialize access to a session is not implemented.
|
// on serialization failures but without the overhead and without possible false positives due to
|
||||||
|
// longer gap locking.
|
||||||
if (!$updateStmt->rowCount()) {
|
if (!$updateStmt->rowCount()) {
|
||||||
try {
|
try {
|
||||||
$insertStmt = $this->pdo->prepare(
|
$insertStmt = $this->pdo->prepare(
|
||||||
@ -208,8 +209,10 @@ class PdoSessionHandler implements \SessionHandlerInterface
|
|||||||
$insertStmt->bindValue(':time', time(), \PDO::PARAM_INT);
|
$insertStmt->bindValue(':time', time(), \PDO::PARAM_INT);
|
||||||
$insertStmt->execute();
|
$insertStmt->execute();
|
||||||
} catch (\PDOException $e) {
|
} catch (\PDOException $e) {
|
||||||
// ignore unique violation SQLSTATE
|
// Handle integrity violation SQLSTATE 23000 (or a subclass like 23505 in Postgres) for duplicate keys
|
||||||
if ('23505' !== $e->getCode()) {
|
if (0 === strpos($e->getCode(), '23')) {
|
||||||
|
$updateStmt->execute();
|
||||||
|
} else {
|
||||||
throw $e;
|
throw $e;
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
@ -241,7 +244,8 @@ class PdoSessionHandler implements \SessionHandlerInterface
|
|||||||
"WHEN MATCHED THEN UPDATE SET $this->dataCol = :data, $this->timeCol = :time";
|
"WHEN MATCHED THEN UPDATE SET $this->dataCol = :data, $this->timeCol = :time";
|
||||||
case 'sqlsrv' && version_compare($this->pdo->getAttribute(\PDO::ATTR_SERVER_VERSION), '10', '>='):
|
case 'sqlsrv' && version_compare($this->pdo->getAttribute(\PDO::ATTR_SERVER_VERSION), '10', '>='):
|
||||||
// MERGE is only available since SQL Server 2008 and must be terminated by semicolon
|
// MERGE is only available since SQL Server 2008 and must be terminated by semicolon
|
||||||
return "MERGE INTO $this->table USING (SELECT 'x' AS dummy) AS src ON ($this->idCol = :id) " .
|
// It also requires HOLDLOCK according to http://weblogs.sqlteam.com/dang/archive/2009/01/31/UPSERT-Race-Condition-With-MERGE.aspx
|
||||||
|
return "MERGE INTO $this->table WITH (HOLDLOCK) USING (SELECT 1 AS dummy) AS src ON ($this->idCol = :id) " .
|
||||||
"WHEN NOT MATCHED THEN INSERT ($this->idCol, $this->dataCol, $this->timeCol) VALUES (:id, :data, :time) " .
|
"WHEN NOT MATCHED THEN INSERT ($this->idCol, $this->dataCol, $this->timeCol) VALUES (:id, :data, :time) " .
|
||||||
"WHEN MATCHED THEN UPDATE SET $this->dataCol = :data, $this->timeCol = :time;";
|
"WHEN MATCHED THEN UPDATE SET $this->dataCol = :data, $this->timeCol = :time;";
|
||||||
case 'sqlite':
|
case 'sqlite':
|
||||||
|
Reference in New Issue
Block a user