A Session Fixation issue exists in CodeIgniter prior to 3.1.9 because session.use_strict_mode in the Session Library was mishandled.
codeigniter codeigniter