A hijacking user will try to set his session ID prior to login; this can be prevented if you regenerate the ID at login.
A hijacking user will try to set his session ID prior to login; this can be prevented if you regenerate the ID at login.
这样就可以阻止一个恶意用户会用以前的会话ID去尝试登录。