title: How exactly does session hijacking work in PHP?
body: <p>I've made a website which has registration/login. I can see the PHPSESSID cookie in Chrome's Developer Tools, so I'm wondering how can I use this session id value to hijack into the account I'm logged, from let's say a different browser, for simplicity's sake? </p>
  
  <p>Should a secure website be able to determine that this session is being hijacked and prevent it? </p>
  
  <p>Also, how come other big sites that use PHP (e.g. Facebook) do not have PHPSESSID cookies? Do they give it a different name for obscurity, or do they just use a different mechanism altogether?</p>