fuel/core — pull request #717 by arbme (2011-12-08 21:18:02+00:00)
Title: Bugfix read(): Fixed possible session hi-jacking by duplicating previous...

..._id in database. When previous_id is found it currently overwrites the current session id with previous_id, so the database tables "session_id" & "previous_id" both contain previous_id. If an attacker managed to get the previous_id the owner would be logged out as their session_id is no longer in the database.