How Safe is Codeigniter Sessions

[eluser]WanWizard[/eluser]
[quote author="keevitaja" date="1348609126"]how is "remember me" done in codeigniter forums and other sites? with the same logic as i was describing or something more secure?[/quote]
Most sites implement it as you described earlier. With a hash in the cookie that links back to the user record, which is used to do a 'forced login' of that user.

In this context this is an interesting read: http://jaspan.com/improved_persistent_lo...t_practice. Here's an implementation of that: https://github.com/gbirke/rememberme

It is also good practice to (still) ask for a password if a user is authenticated using a remember_me cookie and he wants to change something important. This is the way for example Amazon or Linkedin implement it.