Can hacker hack session_data?

[eluser]WanWizard[/eluser]
If your session data is in the database, if a hacker can access that they can access all data, so I shouldn't worry about sessions in particular.

Use proper validation, XSS filtering and CI's DB layer to protect yourself against SQL injection attacks, which are the best way to get into your database.