Is it possible for a malicious user to edit $_SESSION?

[jjznoh1993]

I save some important info in \[code\]$_SESSION\[/code\], not in \[code\]$_COOKIE\[/code\]. So, my question, is it dangerous? Or is it protected from malicious users trying to edit it and I'm fine?Thank you.By the way, is it possible also to edit \[code\]$_COOKIE\[/code\]? I heard yes, but if yes, then how?

 

[Raviina]

try with a little patch you can secure your files

 

[zatch]

Is possible, but insecure, sorry for my english