[eluser]WanWizard[/eluser]
Just looked into the latest code, at some point they seem to have the rotation issue fixed (it now rotates in the constructor).
set_userdata() calls sess_write(), so every update of the session adds a new cookie to the list. What also can happen (but I haven't tested it), there's a maximum length of about 4Kb voor a line in the HTTP header. If you have a lot of duplicate cookies, this line can get very long. Perhaps that's the cause of the session being dropped? This problem can get worse if you store session data in the cookie...
I'm currently struggling with a PyroCMS install which suffers badly from this issue, and no Ajax in sight. I sometimes login, open a forum message, click on reply, and when I submit, the session is already gone. Drives me nuts...
p.s. just checked, every 'pyrocms' cookie adds over 600 bytes to the Set-Cookie header. More then 6 and it's over. This could be a possible cause, I'll see if I can reproduce the session loss by setting lots of cookies.
