Recent “Fix PHP start session only when needed” change doesn’t fix anything
-
Version 2.3.3 of WP Cassify indicated “Fix PHP start session only when needed” which seems to be partly based on the conversation in https://www.ads-software.com/support/topic/patch-to-start-php-session-only-when-needed/.
However, WP Cassify, even as of the latest (2.3.4) version, is still starting a PHP session even if you so much as visit a public WP page. The change made in 2.3.3 is not sufficient enough to satisfy what the changelog message indicates: https://plugins.trac.www.ads-software.com/changeset?sfp_email=&sfph_mail=&reponame=&new=3112582%40wp-cassify&old=3106726%40wp-cassify&sfp_email=&sfph_mail=
There is a working example of how to actually fix this in https://github.com/LafColITS/wp-cassify/commit/82dca78aea239e4775052c2990980e48d417b742. The most important aspect of that particular example is using isset($_COOKIE[session_name()]) to help ensure that the session is not started unless an actual pre-established session cookie is already present.
- You must be logged in to reply to this topic.