Can the security feature using sessions be edited or hacked?

[kiropyckoticks]

I've been working on a personal website.

http://www.ikodeko.com

One part of that website is a quiz making tool for users. I just wonder what is the best security in order to avoid advanced users from messing with taking a quiz or editing questions.

I am just curious if they can edit sessions in php, if they can, what are some more secure ways on how to transfer values from one page to another.

[Weedpacket]

All they can mess with is the session ID, which is all they get. There is no data stored in the session ID. There is a section on security in PHP's chapters on [man]session[/man] functions.

[kiropyckoticks]

Okay. Thanks!