Sessions

• Can't just use TCP

• Like encryption and threading, use libraries

• • $_SESSION
  • mod_session
  • IIS solution?

• Session hijacking and credential replay