session security question

[php_guest]

I have a business social network site on hosting server. I am wondering if sessions are enough secure.

ini_set('session.use_only_cookies', 1); //this prevent Session Fixation?
session_start();

if($_SESSION['loggedIn'] && $_SESSION['userIP']==$_SERVER["REMOTE_ADDR"]) // extra security
//user is logged in, assign all data to this profile from session
else
//user is not logged in, no data are assigned

 

Would you consider that as enough secure?

[BlueSkyIS]

yes.