Is Session a safe place to store data ?

Thank you very much for those tips !

I will keep what I´ve learned from you in my mind !

Another question....

All my security verifications are made in the construct__ of my controller.

Is it ok to pass the user variable with all the user info to other functions in the controller ?

Like:

PHP Code:

function __construct() {
  $this->user = $this->access_model->get_user_data();

  //security verifications...
}

function index(){
  $data['user'] = $this->user->id
}