External links: » Session fixation
HTTP session management is core of web security. All of mitigation should be adopted to make sure session security. Developer should enable/use applicable security measures.