Can a user modify a PHP session?

Question

Page1.php:

Page2.php

Answer 1

The session can only be modified from the PHP code, it's unlike $_POST, $_GET, $_COOKIE etc

As an aside I think you can use empty() to simplify your conditional: