Session Fixation Overview

All of the other methods of session hijacking (http://cleverlogic.net/content/session-hijacking) focus on stealing or predicting a session identifier already created, and using it. Session fixation, on the other hand is where the attacker sets the user’