URL rewriting, is it safe?

[Andras Balogh]

Hi all,             I have a strange question. When the session is maintained with URL rewriting, the session id is added at the end of a link. Now if i follow this link i can see a long session id number. What happens if i MANUALLY modify this number at client side?         I will end in somebody elses session? This should be possible, no?         Every answer is apreciated.           Best wishes,                                      Andras.