If you're using the default file-based session-handling system, you could read the relevant file in the directory where they're all being stored. Their names are of the form "sess_whatever the session id is", and the format ... um ... I forget. Let's see...
Looks like this:
foo|s:3:"bar";baz|i:97;wibble|a:3:{i:0;s:4:"this";i:1;s:4:"that";i:2;s:6:"tother";}
The bit up to the pipe is the name of the session variable.
Then the value, specified according to the usual rules for serialize() , so unserialize() can be used to parse it.
Then a semicolon, and the format repeats for the next session variable.