Security warning

Viewing 6 replies - 1 through 6 (of 6 total)
  • zealsupport

    (@zealsupport)

    3 months, 1 week ago

    Hello @awr10e

    The reported security issue has already been fixed in version 3.2.

    We will continue to monitor and check the session handling.

    If you have any questions or need further clarification, please feel free to ask—I’m available to help.

    Thank you,
    ZealousWeb

    Thread Starter awr10e

    (@awr10e)

    3 months, 1 week ago

    It must have been an old notification as I’m already on 3.2 (strange) its not reporting the issue anymore.

    the PHP session issue is reported in Site Health

    An active PHP session was detectedPerformance

    A PHP session was created by a session_start() function call. This interferes with REST API and loopback requests. The session should be closed by session_write_close() before making any HTTP requests.

    zealsupport

    (@zealsupport)

    3 months, 1 week ago

    Hello @awr10e ,

    Thank you for the update.

    Yes, you’re correct, it does appear that the earlier notification may have been from an older version, as version 3.2 is already installed and the issue is no longer being reported in that context.

    Regarding the PHP session warning shown under Site Health (“An active PHP session was detected”), we are aware of this behavior. The session is triggered by a session_start() call, and we understand that it can interfere with REST API and loopback requests if not properly closed.

    Please rest assured that we are actively working on this issue, and it will be addressed in an upcoming update to ensure better compatibility with Site Health and caching mechanisms.

    Thank you for your patience and for bringing this to our attention.

    Thank you
    ZealousWeb

    zealsupport

    (@zealsupport)

    3 months, 1 week ago

    Hello @awr10e ,

    Thank you for your patience.

    We’re happy to inform you that the reported PHP session issue has been fixed in version 3.3.
    Please update the plugin to the latest version and let us know if everything works as expected on your end.

    If you find the plugin helpful, we’d really appreciate it if you could take a moment to leave us a review. Your feedback helps us improve and support the plugin better.

    Thanks again for your support.

    Thank you,
    ZealousWeb

    Thread Starter awr10e

    (@awr10e)

    3 months, 1 week ago

    Thanks, I can confirm the PHP session warning has disappeared from Site Health

    zealsupport

    (@zealsupport)

    3 months, 1 week ago

    Hello @awr10e

    Thank you so much for the kind words and for confirming that the PHP session warning has disappeared from Site Health.

    If possible, we’d really appreciate it if you could take a moment to leave a review for the plugin. Your feedback means a lot to us and helps other users make informed decisions.

    Thanks again for your support.

    Thank you,
    ZealousWeb

    • This reply was modified 3 months, 1 week ago by zealsupport.
Viewing 6 replies - 1 through 6 (of 6 total)

You must be logged in to reply to this topic.