DELETE

[eluser]WanWizard[/eluser]
You seem to forget that EVERY session solution, including PHP sessions, create a cookie to track it.

With CI's session library, the cookie contains extra security measures, and it is encrypted so the session id can not be stolen. With PHP's sessions, there's a cookie with a single value: the unencrypted session id.
In all the years I've been reading about so called issues with CI's session class, it's more often then not about a user error when configuring the library. People using 'native' solutions are just lucky that most php.ini files contain a set of defaults that often work.

I don't mind you using this, it's up to you. I do mind you telling other potential users it is secure, when it isn't.