Oh, yes, this is fairly well known. The only real solution is to make sure you (anyone) does not include the sessionID with ANY link given out. Gotta be careful. AgentSmith

Contact Me | Gallery | Freestuff | IMDB Credits | Personal Site
"I want to be what I was when I wanted to be what I am now"