Lol! Very good indeed. I wasn't that bad with security to the point where I relied on obscure file names, but for one of my very first websites - a music site, I didn't know about sessions and instead went about creating my own - based entirely on the user's IP! Therefore if the user used a common proxy and logged in, you guessed it, everybody else using the exact same proxy would have been logged in as well!

__________________
The man who comes back through the Door in the Wall will never be quite the same as the man who went out.