Session攻击（会话劫持+固定）与防御

http://www.cnblogs.com/phpstudy2015-6/p/6776919.html