About the example from the CGI::Session::Tutorial doc. I listed above, it only checks to see if a Cookie name exists or not.
That being said, anyone who can create a cookie with the same name can be verified and will be able to view a members area site.
How can you use CGI::Session to actually check the session id from the cookie to match the one from the database? There is no where in the tutorial or in the cookbook that shows an example how. Ahhhhh I wish I was smart and could figure this stuff out easy.