Hi guys! We just upgrade our wiki to MW 1.28 and the session totally failed.

The symptom is session id changed every time user refresh/visit new page. Therefore, users can't login nor save edits. (*"There seems to be a problem with your login session; this action has been canceled as a precaution against session hijacking. Go back to the previous page, reload that page and then try again" / **Sorry! We could not process your edit due to a loss of session data. Please try again. If it still doesn't work, try logging out and logging back in.*)

We tried $wgSessionCacheType = CACHE_DB; / CACHE_ACCEL; and 'redis'; as well as set the $wgCookieDomain+$wgCookiePrefix but does not solve this error at all. https://phabricator.wikimedia.org/T156882 bug reported here but not any known fix for that.

Anyone have idea on how to fix this bug?

this bug can be reproduced if you login here https://zh.moegirl.org/index.php?title=Special:%E7%94%A8%E6%88%B7%E7%99%BB%E... with User: *sessionlosttester* Password: *123456*

Thank you!