A session fixation attack is designed to force the session ID of a client to an explicit, known value.

会话固定攻击就是将客户端的会话id强制设置为一个明确的已知值。