A admin Administrator Staff member Aug 21, 2008 #1 If someone was to sniff the sessionid of a php4 session, would he then be able to hijack it?