php开发银行系统

// 防止SQL注入
$stmt = $pdo->prepare('SELECT * FROM users WHERE id = :id');
$stmt->execute(['id' => $userId]);
$user = $stmt->fetch();

// 防止XSS攻击
$input = $_POST['input'];
$input = htmlspecialchars($input, ENT_QUOTES, 'UTF-8');

// 使用Redis缓存
$redis = new Redis();
$redis->connect('127.0.0.1', 6379);
$cacheKey = 'user:' . $userId;
if ($redis->exists($cacheKey)) {
    $user = json_decode($redis->get($cacheKey), true);
} else {
    $stmt = $pdo->prepare('SELECT * FROM users WHERE id = :id');
    $stmt->execute(['id' => $userId]);
    $user = $stmt->fetch();
    $redis->setex($cacheKey, 3600, json_encode($user));
}

// 使用数据库事务
try {
    $pdo->beginTransaction();
    $stmt1 = $pdo->prepare('UPDATE accounts SET balance = balance - :amount WHERE id = :fromId');
    $stmt1->execute(['amount' => $amount, 'fromId' => $fromId]);
    $stmt2 = $pdo->prepare('UPDATE accounts SET balance = balance + :amount WHERE id = :toId');
    $stmt2->execute(['amount' => $amount, 'toId' => $toId]);
    $pdo->commit();
} catch (Exception $e) {
    $pdo->rollBack();
    throw $e;
}