Bug #17542
closedNinja Forms plugin can write many "_wp_session" entries into the options table
0%
Description
While looking a bit into #17522, I looked at the options database table for the ILETC site and found 51,000 entries for options beginning with "_wp_session"
:
mysql> select count(*) from wp_1185_options where option_name like '_wp_session%'; +----------+ | count(*) | +----------+ | 51084 | +----------+ 1 row in set (0.02 sec)
I searched through our plugins to see what might be causing this and the options comes from the Ninja Forms plugin. Specifically, the use of the WP_Session
library: https://github.com/cuny-academic-commons/cac/blob/master/wp-content/plugins/ninja-forms/includes/Session.php. Sometime in the past, Ninja Forms was activated on the ILETC site, but it isn't currently active.
Next, I decided to look through current sites with Ninja Forms active. Out of the current sites with Ninja Forms active, I came across the GC Digital Fellows website, which had ~150,000 "_wp_session"
options:
mysql> select count(*) from wp_1120_options where option_name like '_wp_session%'; +----------+ | count(*) | +----------+ | 154139 | +----------+ 1 row in set (0.35 sec)
The other sites with Ninja Forms active did not have this issue. I just deleted the "_wp_session"
options for both ILETC and GC Digital Fellows and cleared the options object cache for both sites.
Perhaps this is an older bug in Ninja Forms that might have been fixed in a more, recent version, but thought it would be worth documenting in a ticket.
Related issues