diff --git a/reference/session/reference.xml b/reference/session/reference.xml
index bc3f5b9fce..323be30ac1 100644
--- a/reference/session/reference.xml
+++ b/reference/session/reference.xml
@@ -1,5 +1,5 @@
 <?xml version="1.0" encoding="iso-8859-1"?>
-<!-- $Revision: 1.26 $ -->
+<!-- $Revision: 1.27 $ -->
  <reference id="ref.session">
   <title>Session handling functions</title>
   <titleabbrev>Sessions</titleabbrev>
@@ -58,6 +58,9 @@
    
    <section id="session.security">
     <title>Sessions and security</title>
+    <para>
+     External links: <ulink url="&url.session-fixation;">Session fixation</ulink>
+    </para>
     <para>
      The session module cannot guarantee that the information you store
      in a session is only viewed by the user who created the session. You need