1
I am using one of the later versions of XOOPS and I (Like an idiot) posted a link with a session id on the end and someone was able to get into my site. Luckily they didn't do anything mallicious, but that's still a huge hole. Other than no posting links like that (/me feels stupid already) how can I prevent this?