want to make my "Spy on user" hack work in vbb 2

[G0D]

I made a new field in the table "session"
the field is called "location" (this is a field used in vbb 1.1.X but not in vbb 2)

The reason I need this field is for my "Spy on user" hack.
It tells us what other users are doing..(viewing what thread, forum, etc.)

I made some adjustment in session.php
example:

$DB_site->query("UPDATE session SET userid=$bbuserid,lastactivity=$datenow,location='".addslashes($scriptpath)."' WHERE sessionid=$session[sessionid]");

The code works fine :)

but...the location is showed as:

/vbb2/showthread.php?s=d10a266aeba10e516dc0707abc5c262f&threadid=2

the sessionid (d10a266aeba10e516dc0707abc5c262f) is also part of "location"..but I don't want that.
I want it to show :

/vbb2/showthread.php?threadid=2

Anyone here that can help me so I can use my hack?
better question: Does it mather when someone knows the session id of another user?

[G0D]

never mind..found the piece of code in newtread.php

$scriptpath=ereg_replace("sessionhash=[a-z0-9]{32}&","",$scriptpath);
$scriptpath=ereg_replace("\\?sessionhash=[a-z0-9]{32}","",$scriptpath);
$scriptpath=ereg_replace("s=[a-z0-9]{32}&","",$scriptpath);
$scriptpath=ereg_replace("\\?s=[a-z0-9]{32}","",$scriptpath);

But still then..does it mather when users know other users sessionid?

[JamesUS]

It doesn't directly cause problems but it is a big security risk.
Just use the code you posted above to remove the sessionhashes from the urls.