Should i worry about securing PHP sessions for my users? How do hackers steal the sessions?
The information users of my site can view is not at all sensitive and if viewed or modified by a hacker wouldn't really harm users, but would inconvenience them.
Is storing and checking the IP really necessary? How useful is user agent checking? I assume it would be as easy as sending a user agent header.