title: Is it possible to forge a PHP session ID?
body: <p>If a page checks for the existence of a PHP Session:</p>
  
  <pre><code>if (isset($_SESSION['secret'])) {...grant access to EVERYTHING!!!}
  </code></pre>
  
  <p>Is it possible / How could I generate <code>$_SESSION['secret']</code> on my machine, in a situation where I don't have access to the page's back-end code? I'm trying to hack into the international space station...</p>