Strange Session Behaviour

Hi guys, ive wrote a user profile script, and its recently been discovered that viewing this page gives the user admin rights :S

Ive discovered that one of my sessions ($_SESSION['mid']) is been changed to the mid of the profile your looking at.

mid is the unique id of each member.

I cant see where the session is been changed. Follow the link below for the code.

Spent a good couple of hours looking now

Thanks

U can make your post RESOLVED so others will know not to read it...

but its not resolved.

i found a temporary fix by renaming the $mid variable, but how can this be changing the sessions when im not telling it to?

Do u use register_globals = On?

i'll have to check that when i get home.