In this lesson, Mal is a hacker who has noticed that your website passes session IDs in the query string.
