This article shows how to avoid a Session fixation vulnerability in ASP.NET by explicitly removing the "ASP.NET_SessionId" cookie in the Logout method. ...