Not sure where you heard/read about the scalability of sessions, but since sessions are server side you eliminate the possibility of tampering altogether. You could use sessions in the database instead, if you wanted.
I've never heard of storing user session states in cookies before. -- Our newest site for the community: CakePHP Video Tutorials http://tv.cakephp.org Check out the new CakePHP Questions site http://ask.cakephp.org and help others with their CakePHP related questions. To unsubscribe from this group, send email to [email protected] For more options, visit this group at http://groups.google.com/group/cake-php
