Just a couple of questions for the more knowledgeable of you guys.
a) (PHP) Is it worthwhile using a custom session handler.. ever? I recently purchased a PHP security book (Fairly cheaply somehow) since web guides seemed fairly limited and it sort of implied that it's good as if it uses a database then other applications on the server wouldn't be able to look at your sessions and hijack them, it also seems good because you can build stuff like IP, header etc. verification right into the session handler - however some posts I've read online say that the performance hit isn't worthwhile but since for a lot of my scripts I have to pull down a lot of stuff from mysql anyway I don't see the issue.
b) I've been planning on expanding my coding horizons beyond web languages for a while and whilst I do the occasional LUA coding on garry's mod I feel like one of the C languages is more worthwhile. Is it more advisable to learn C, C++ or C#. I'm leaning towards C++ as C# has a heavy windows focus and since C doesn't have classes. I could learn something like Java but it feels like such a cheat and an excuse for sloppy coding, it's also really inconvenient if people don't already have Java installed. Thoughts?