Comment by tomc1985

Assuming session ID's are tied to individual users and looked up via a "SELECT * from sessions where id='?'" type query, how does this even happen?