Can a user modify a PHP session?
<p>Page1.php:</p>

<pre><code>&lt;?php
session_start();
if ($_POST['password'] == "testpass")
$_SESSION['authenticated'] = true;
?&gt;</code></pre>

<p>Page2.php</p>

<pre><code>&lt;?php
session_start();
if (isset($_SESSION['authenticated']) && $_SESSION['authenticated'] == true) {
echo "Super secret stuff!";
}
?&gt;</code></pre>

<p>Can a user get in without the super secure password?</p>
