Native sessions or CI sessions.

[eluser]EugeneS[/eluser]
[quote author="WanWizard" date="1302307060"]I suggest with advice like this, you give up on all other security features as well.

Passwords? Why have the users go through one more screen? Oh, you do use passwords? Why hash them, store them in plain text. XSS filtering? Not needed. URI filtering? Same deal. Output escaping? Ridiculous.

Sigh... I give up...[/quote]

useless irony when dont have arguments in support of your point of view .
btw XSS filtering should be used also not everywhere it is resources taking thing so use it wise