It is important that your session IDs are generated by a strong random number algorithm, and are of sufficient length to be unguessable. Let's see how easy it is for a hacker to get into your site if your session IDs are weak.