[Solved] Various Session problems

[eluser]WanWizard[/eluser]
If your application using ajax calls?

1. If so, you need to extend the session class so that the session_id is not rotated every (in this case) 300 seconds. If this happens on an ajax call, the id in the database has changed, but the browser never received the updated cookie. Search here for IS_AJAX to find the solution.

2. The cause of this could be in 1. Also, remove the underscore from the cookie name, Internet Explorer doesn't like it.

3. No, a request is a request, doesn't matter where it comes from. Blocking bots from creating sessions might even break your code (that might expect a valid session).

4. Whats your production setup? Any load balancers, reverse proxies, application firewalls in place?