[Wikitech-l] Is the $_SESSION secure?