User ID, session data and security

[eluser]LuckyFella73[/eluser]
The short answer is: use DB sessions. That way you only get a cookie with
a session id, all other data is stored in your db. In an other thread I read
the hint to use a random encryption key that makes it even harder to manipulate.

For more informatios use the search function of this forums. There are plenty
of threads about Codeigniter session and security. Or wait for Wanwizzard who
has deep insight with sessions/ CI sessions.