Should I implement IC sessions in my application?

[eluser]tonanbarbarian[/eluser]
Currently the CI session handler stores all of the information in a cookie. Techincally if you do not use encrypted cookies it is possible to view the information in the session by looking at the data in the cookie.

For security you are better of using DB_Session or one of the other 3rd party session libraries that stores the session data in the database or similar.