Welcome Guest, Not a member yet? Register   Sign In
New to Code Igniter & $_SESSION?
#5

[eluser]WanWizard[/eluser]
@Richie Jenkins,

There are several reasons for not using PHP's native sessions:
- they are not secure (the session id is a simple non-encrypted cookie without any checks)
- they are file based, and depending on the host config not always very secure (you can access other website's session files if not configured carefully)
- they are file based, so you can't query them (for example to get the number of logged-in users)
- they don't scale as well as a database does (not much of an issue in a single-server setup)
and probably lots more.

For me, the security issues alone are reason enough not to use them.


Messages In This Thread
New to Code Igniter & $_SESSION? - by El Forum - 02-09-2011, 12:05 PM
New to Code Igniter & $_SESSION? - by El Forum - 02-09-2011, 12:32 PM
New to Code Igniter & $_SESSION? - by El Forum - 02-09-2011, 12:40 PM
New to Code Igniter & $_SESSION? - by El Forum - 02-09-2011, 01:27 PM
New to Code Igniter & $_SESSION? - by El Forum - 02-09-2011, 02:40 PM
New to Code Igniter & $_SESSION? - by El Forum - 02-09-2011, 08:17 PM



Theme © iAndrew 2016 - Forum software by © MyBB