[PHP] Would you define this as POOR security?

[JaydenC]

Yes s-p-n thats what I was trying to say.
PS, You should wrap htmlspecialchars around when you start teh session.