Switch from cookie sessions to database sessions. We can't use cookie

sessions; it encodes all the value into the cookie which means
little/no security, transfer costs, and storage limits.

1 files changed, 7 insertions, 0 deletions

diff --git a/core/helpers/core_installer.php b/core/helpers/core_installer.php
index de4c51d9..f71bec6d 100644
--- a/core/helpers/core_installer.php
+++ b/core/helpers/core_installer.php
@@ -82,6 +82,13 @@ class core_installer {
                    UNIQUE KEY(`name`))
                  ENGINE=InnoDB DEFAULT CHARSET=utf8;");
 
+      $db->query("CREATE TABLE `sessions` (
+		  `session_id` varchar(127) NOT NULL,
+		  `last_activity` int(10) UNSIGNED NOT NULL,
+		  `data` text NOT NULL,
+		  PRIMARY KEY (`session_id`))
+                 ENGINE=InnoDB DEFAULT CHARSET=utf8;");
+
       $db->query("CREATE TABLE `vars` (
                    `id` int(9) NOT NULL auto_increment,
                    `module_id` int(9),