PHP 4.x Session Spoofing 2025-03-31 I read about this exploit on neworder http://neworder.box.sk/showme.php3?id=6058 it shows the problem, and gives a solution
