So I have been reading phpsessid doesn't scale well, what else can I do?
I don't understand what that means, so you might want to post a link to whatever you've been reading.
Ah yes sorry
http://www.sitepoint.com/top-10-php-security-vulnerabilities/
I also recall Alex from PHPaccdemy mention something about scaling in one of his videos
The important thing is to be using HTTPS protocol so that the session cookie is encrypted along with everything else in the request, so that somebody monitoring web traffic cannot interpret it. But if you want to learn more details and options: http://phpsecurity.org/ch04.pdf
Ah thanks, my reading for today