ApEx:URL Tampering

http://dgielis.blogspot.com/2007/03/session-state-protection-and-url.html