Ion Auth - Lightweight Auth System based on Redux Auth 2

[eluser]Larry Rubin[/eluser]
In your README for Ion Auth you recommend using encrypted database sessions.

Does this require any additional steps beyond the following:

1) Create the ci_sessions database table:

Code:

CREATE TABLE IF NOT EXISTS  `ci_sessions` (
session_id varchar(40) DEFAULT '0' NOT NULL,
ip_address varchar(16) DEFAULT '0' NOT NULL,
user_agent varchar(50) NOT NULL,
last_activity int(10) unsigned DEFAULT 0 NOT NULL,
user_data text NOT NULL,
PRIMARY KEY (session_id)
);

2) Modify config.php

a) "Encryption Key" setting

Code:

$config['encryption_key'] = "[ 32 char random string]";

b) "Session Variables" settings

Code:

$config['sess_cookie_name']        = 'ci_session';
$config['sess_expiration']        = 7200;
$config['sess_encrypt_cookie']    = TRUE; // installation default is FALSE
$config['sess_use_database']    = TRUE; // installation default is FALSE
$config['sess_table_name']        = 'ci_sessions';
$config['sess_match_ip']        = FALSE;
$config['sess_match_useragent']    = TRUE;
$config['sess_time_to_update']     = 300;

Thanks in advance for your help, and for the tremendous effort with Ion Auth.