JetSetGo uses $_SESSION variable poorly

  • The Jet Set Go WooCommerce plugin uses $_SESSION. This is an anti-pattern for scalable/cloud hosting systems which are becoming increasingly common. See https://pantheon.io/docs/wordpress-sessions/.

    It also writes cookies with the name starting with “SSESS” which Varnish caching blocks.

    Can you adjust the plugin to work better across distributed hosting environments? At present, the use of the $_SESSION variable in cookie-based session tracking named “SSESS” busts our cache so that our server performance is severely hindered. Even just renaming the cookie from SESS… to, say, STYXKEY_… would fix the problem.

    This would be the case for any host that uses Varnish caching for WordPress.

Viewing 4 replies - 1 through 4 (of 4 total)
  • Plugin Author cedcommerce

    (@cedcommerce)

    Hello

    Thanks for reaching us , we are not using such variable “SSESS” but we will check this issue if it is coming from our extension then will change it in our upcoming version.

    Thanks, And Regards
    CedCommerce

    Thread Starter intechra

    (@intechra)

    Thanks. Here is a list of all the Varnish cache-busting cookie name regex patterns.

    https://pantheon.io/docs/caching-advanced-topics/#pantheons-varnish-cookie-handling

    Another bit of advice we got from the hosting support folks was as follows:

    Using $_SESSION on Pantheon is not bad at all unless it bypasses the cache and you don’t intend it that way. If you want to use cookies without bypassing varnish, you can prefix it with “STYXKEY” Here are a couple of good and bad prefix examples.

    STYXKEY_mysession, STYXKEY_hello123

    A lot of plugins allow the cookie name to be altered. It’s at times as simple as adding a line in wp-config.php. You may reachout to the plugin developers and ask them how you can alter the cookie name that the plugin is using.

    Plugin Author cedcommerce

    (@cedcommerce)

    Hello,

    Thanks for this information we will check this.

    Thanks, And Regards
    CedCommerce

    Thread Starter intechra

    (@intechra)

    Great! If you need a sandbox environment to develop and test in, I’m happy to provide it.

Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘JetSetGo uses $_SESSION variable poorly’ is closed to new replies.

Tags