Is my site being attacked?

Looks like you have changed your session directory to your public_html

Hi marksman,
    Actually, I don't have much experience on CI.
I read Paradinight  's link above & researched on Google. They suggest I configure "$config['sess_save_path'] = 'ci_sessions'; "

My website is very simple, just show product detail & allow user to buy ("MUA NGAY") product, so I don't need to store users's session. But the site is BLANK PAGE if I use default config "$config['sess_save_path'] = NULL;". I don't know the reason although It worked well in the past.

NOW, when I set "$config['sess_save_path'] = 'ci_sessions'; " ==> a "ci_sessions" folder were create in public_html folder (public_html/ci_sessions).
A lot of ci_sessionxxxxxxxxx were generated in "ci_sessions" folder. I don't know why the session is called to many times & generated too many files as the attachment link ( My website DO NOT have a lot of users).

ci_session_file link : https://drive.google.com/open?id=0B7yfHl...k45N29fT2s

HOW CAN I STOP GENERATING these files? Is there any default trigger that calls & generates automatically these ci_sessionxxxxx files?

THANKS A LOT!

Session is needed for shopping cart app, and it is needed for initializing shopping cart class.