g1smd - 10:53 am on Sep 23, 2008 (gmt 0)

Now that would have been a good idea: the session ID should always be called sessionid and the value should be exactly X or Y or Z characters long.

[edited by: g1smd at 11:14 am (utc) on Sep. 23, 2008]