User Session Destroyed maybe related to caching plugin?

Are you caching the admin dashboard? If so, I would recommend to disable that part, it could be dangerous, and to only cache the front end.

“nfw_goodguy” is a session flag, it is stored in the server, not in a cookie.
The session cookie is usualy named $_COOKIE[“PHPSESSID”]. If can be renamed too in your PHP configuration. Check its name with a phpinfo script:

<?php
phpinfo(33);
?>

But if you exclude it from the cache, you are likely going to exclude everyone.

Hi nintechnet and apologies,

haven’t seen your reply until now! Well the problem persists.
I’ve tried fiddling with it to no avail. Besides, I’ve installed NFW for PHP (for a Magento install) and it gives me:

An opcode cache was detected: apc.enabled. Make sure to disable it in the /var/www/italyze.me/mg/nfw/conf/ folder, otherwise any configuration change may not take effect immediately.

So I’ve enabled opcache blacklist as per this guide:
https://stackoverflow.com/questions/24231469/blacklist-a-directory-with-zend-opcache/24231989

But nothing changes…
Any idea would be much appreciated!
Best,

– Luca

Did you check with a php-info script as indicated in my previous message?
Try to run it and then check these values:

session.cache_expire : should be around 180 by default
session.gc_maxlifetime : should be around 1440 by default
session.use_cookies: MUST be ‘on’
session.save_path: MUST point to a valid writable directory.
session.name: MUST not be empty

Regarding the opcode cache, NinjaFirewall will always show the warning, because it can detect that you have an opcode cache, but cannot detect whether it is disabled in the ‘/conf/’ folder or not. You can safely ignore it.

Hi,
apologies but I did not check as per your instructions prior.
No, I am not caching the admin at all. Happened in the past and it was a freaking experience.
phpsessid is a 27 alphanumeric string but, as you’ve stated, it won’t be a good idea to exclude it.
The weird part is that I can’t see any session flag in phpinfo (put the file in my root folder). Nor I can see anything beside COOKIE and SERVER info!!!
Is it the right behaviour? Any idea?

Still everything is going smoothly so I can safely assume that I won’t get any trouble… or not?

If everything is going smoothly, then you should not get into trouble.

Great and thanks!