CI 2.0: sessions

[eluser]WanWizard[/eluser]
Maybe a tip for next time: search the forum before asking questions, and read up on what's been said here.

First of all, CI only uses cookies if you tell it to. It is configured so by default, as when you install CI, there is no database. But it is absolutely perferred to use the database for sessions. If you do, CI will only send a cookie to the client comtaining the session id, just like PHP sessions do.

And indeed, the standard CI code doesn't allow you to specify 0 as session expiry time, if you do, it will assume you forgot to configure it and use 2 years as expiry time. Not handy, I agree. The fix is very simple, and discussed here about a million times already...