Which session library to use? Any suggestions?

[eluser]mrbinky3000[/eluser]
Look, I understand IE blows. The whole point of my post is that I'm getting paid to develop a site, and CI's sessions work on every web browser on the planet save IE.

I live in the REAL WORLD. Not some idealist, everyone-adheres-to-standards parallel universe. And, in the REAL WORLD, a statistically significant portion of people still use IE. Hence, I need to pander to these idiots if I want a paycheck. I can't tell a panel of hospital administrators that *my* Code-Igniter-based web site doesn't work because IE is useless. That argument does not fly when these same administrators can turn on their hospital-issued laptops at that meeting and shop at Amazon or Google stuff on IE with no problems whatsoever. According to their logic, it's my fault for relying on CI's session class. And they are right. Furthermore, they're not going to amend their purchase order for my web site with a multi-million dollar overall of the web browsers on all their computers in all their branches, system-wide.

That fact of the matter is: CI sessions don't work reliably on IE. They don't.

I know hardcore CI fans don't want to face it, but nonetheless I will repeat that fact: CI's session library does not work reliably.

You can hand me a laundry list of why CI's session handling routines are superior and more secure. On paper, that looks great. You can poke holes in my referenced websites. Good for you. But in the REAL WORLD, CI's session class simply just doesn't work reliably on IE. I'm looking right at it with my own two eyes so you can not tell me otherwise. You can't. End of story.

Enough with the complaints, here is something helpful:

With some minor tweaking I've gotten the Philsbury hack listed above to work with dx_auth. It replaces CI's 1.7.2's absolutely-confirmed-to-be-faulty session class with PHP's built-in session handling... which is only potentially less secure than CI's session class if your project is hosted on a shared server with people you don't trust. In my scenario, this is not the case. So it's not a problem. To be honest, it rarely is for anyone.

You can find his version here:
http://www.philsbury.co.uk/blog/code-igniter-sessions

Contact me if you want my version. It's in no way ready to be released--I'm still tweaking it while I try to scramble and rectify this Code Igniter session debacle.