Depends on your code, really. What authentication you're using, what you're storing in cookies, whether you've parametrized your queries, and so on. We can't tell just by a generic description.