Encrypted session BLOB?

I guess session_regenerate_id() doesn't trigger an immediate write() call then ... that may differ in between PHP versions.

A hacky work-around to that would be to do this:

Code:

session_regenerate_id();
session_write_close();
session_start();
// update the row here

A more clean solution is to have a separate table instead of an additional field, using the session ID as a reference between the two.