I ask not to be snoopy I'm working on session scanners and this is the sort of bad behavior that should be detectable by looking at the record. It's a serious security breach - shipping sessions off somewhere without getting permissions.