Aleksander, You mentioned about securing php.ini and referred to: http://www.php.net/manual/en/session.configuration.php#ini.session.save-path http://www.php.net/manual/en/session.configuration.php#ini.session.entropy-file Can you please advise what these should be set to ? Thanks