title: Can a user modify a PHP session?
body: <p>Page1.php:</p>
  
  <pre><code>&lt;?php
  session_start();
  if ($_POST['password'] == "testpass")
      $_SESSION['authenticated'] = true;
  ?&gt;</code></pre>
  
  <p>Page2.php</p>
  
  <pre><code>&lt;?php
  session_start();
  if (isset($_SESSION['authenticated']) && $_SESSION['authenticated'] == true) {
      echo "Super secret stuff!";
  }
  ?&gt;</code></pre>
  
  <p>Can a user get in without the super secure password?</p>