I am using session variables to login users.

Theres no possible way a user could create there own session variable or alter the value is there?

I am pretty sure this is impossible but want to make sure..

Alex