Session question!

[eluser]Jondolar[/eluser]
Cookies are required to do any type of session work. It is the only way to bridge the stateless design of a web page. Sessions require cookies.

There are techniques to help validate a cookie such as comparing the IP addresses. CI allows you to change the cookie being used every few minutes which can help prevent someone from accessing a page using a hijacked cookie.