flash_data safety

[eluser]WanWizard[/eluser]
It has the option (out of the box) to use the database for sessions.

You just can't make it default because that requires a database connection and a sessions table, for which you have to do some configuration work. While your at it, enabling database sessions is modifying 2 config lines extra. Big deal.

I personally don't see the advantage of native sessions. I get one database SELECT and one database UPDATE per page request, both taking 0.001 second. I can easily scale my web frontend without having to worry about native session sharing across webservers. I also use the session table to get statistics about logged in users (how many, how long, idle time, etc.) which is much easier to do with a database table than with native sessions.