Added session-hijacking subfolder