Not sure I agree about the locking mechanism being a bad practice. Most modern apps are designed to work without a constant connection (very optimistic locking), so there is no way for SQL to hold the lock. SQL locks are for data integrity, application locks are often more for business rules. I know they sound the same, but they can be different!
Andy