I have CodeIgniter set to store sessions in the database but still it insists on the following being in a cookie:
a:4:{
s:10:"session_id";s:32:"191668b039f27f1a4fa25586aaaf708e";
s:10:"ip_address";s:14:"123.12.123.123";
s:10:"user_agent";s:50:"Mozilla/5.0 (Windows NT 6.1; WOW64; rv:12.0) Gecko";
s:13:"last_activity";i:1336549698;
}9fed5a2005d9df3ccedff9589aa7d36f
All of this is also in the default_ci_sessions so I don’t know why it’s also going in the cookie! I’m asking because of the new EU cookie legislation about the local storage of user identifiable data. I’m not entirely sure this falls under the legislation but the concern has been raised.
This comes from CodeIgniter Session library’s logic (as PyroCMS is built with CI). I currently can’t tell you why it’s made that way, but I also don’t see a need to store such data separately in the cookie itself. I’ll open a discussion on that and I’ll post the link here to keep track.
Edit: https://github.com/EllisLab/CodeIgniter/issues/1344