User session security in PHP

(written by Lawrence Krubner, however indented passages are often quotes)

This starts off boring but eventually makes some very good points about how to handle sessions securely.

Source