What's wrong with this PHP session ID from URL?

What's wrong with this PHP session ID from URL in a login flow. The PHP code accepts session id from a query parameter. In PHP apps this enables session fixation attacks.

#whatswrongwiththisphpcode #phpbug #phpproductionbug #phpdebugging #phpbackend #phpcodereview #phpsecurity #phpperformance #phpreliability #phpapi #phpwebdevelopment #phpengineering #phpsessionfixation #phpsessionid #phpauth #phpurl

https://www.youtube.com/watch?v=cvqzDpM53Vw

Whats wrong with this PHP session ID from URL? #phpwebdevelopment

YouTube