Enforce database read-only mode inside the transaction
Connection-string session options may be ignored or stripped by managed database poolers or proxies. For a production investigation, do not infer read-only safety from a URL parameter. Open an explicit transaction, execute SET TRANSACTION READ ONLY, and immediately verify SHOW tr…