Why can't I do this in CI?

[eluser]skunkbad[/eluser]
I'm astonished that this code would work outside of CI. Perhaps your definition of "work" may be different than mine.

1) Why would you feel the need to create your own session class when CI has one? It is very flexible and can be used with cookies or a database table. Even using PHP's $_SESSION would be better than creating your own.

2) Why not use one of multiple authentication libraries that are available? Community Auth, Ion Auth, Freak Auth, DX Auth, AG Auth, etc, etc. If you intend to put your application on a production server and have real users that expect their data to be secure, you need to abandon your code. Any kindergarten hacker would hack your site in 2 seconds.