Error with _unserialize in Session.php

[eluser]CroNiX[/eluser]
You could be running out of room to store your sessions. If you are only using cookies, they can only hold 4k of data (that's after it's encrypted - which is larger than preenctyption). So if it's too big, your data will get truncated in the cookie and then it can't unserialize it because it's an incomplete serialized string now.

This can be avoided by using the db for storing your sessions as it's not limited to the cookie size as then it's only storing the session hash in the cookie instead of the data. This is a lot more secure as well since you can't snoop/alter the data in the cookie.