NinjaFirewall (WP edition) troubleshooter
HTTP server : nginx/1.23.1
PHP version : 7.4.33
PHP SAPI : FPM-FCGI
auto_prepend_file : /usr/share/nginx/htdocs/wp-content/nfwlog/ninjafirewall.php
Loader's path to firewall : /usr/share/nginx/htdocs/wp-content/plugins/ninjafirewall/lib/firewall.php
.htninja : found in /usr/share/nginx/.htninja
wp-config.php : found in /usr/share/nginx/htdocs/wp-config.php
NinjaFirewall detection : NinjaFirewall WP Edition is loaded (Full WAF mode)
Loaded INI file : /etc/php.ini
user_ini.filename : .user.ini
user_ini.cache_ttl : 300 seconds
User PHP INI : .user.ini found -
DOCUMENT_ROOT : /usr/share/nginx/htdocs
ABSPATH : /usr/share/nginx/htdocs/
WordPress version : 6.3.1
WP_CONTENT_DIR : /usr/share/nginx/htdocs/wp-content
Plugins directory : /usr/share/nginx/htdocs/wp-content/plugins
User Role : Administrator
User Capabilities : manage_options: OK - unfiltered_html: OK
Log dir permissions : /usr/share/nginx/htdocs/wp-content/nfwlog dir is writable
Cache dir permissions : /usr/share/nginx/htdocs/wp-content/nfwlog/cache dir is writable
NinjaFirewall (WP edition) troubleshooter v1.9.4
Either there’s a configuration problem with your PHP regarding sessions, or another plugin is deleting the current session.
Can you copy the following code, save it to a file named ‘session.php’ and upload it into your WordPress root folder:
<?php
header('Content-type: text/plain');
if (session_status() === PHP_SESSION_ACTIVE) {
echo "Session already active.\n";
} else {
echo "Starting a session..\n";
session_start();
}
$foo = rand(100000, 999999);
echo "Writing $foo to session\n";
$_SESSION['session_test'] = $foo;
echo "Closing session.\n";
session_write_close();
$res = $_SESSION['session_test'];
echo "Session value: $res\n";
session_start();
unset( $_SESSION['session_test'] );
Then, visit https://your-site/session.php and paste the result here.
Resolved by granting Nginx the permission to session_save_path
