Borrowed a Bol (Dutch on-line bookstore) url from irc, and was able to shop in the same session and adjust the content of the shopping cart upwards. Someone else borrowed the same url and got his name attached to the session. Lousy security for an on-line store...