Session Fixation, by Chris Shiflett