Is it safe to use sessions for user validation?

As others have pointed out, your handling of input data and using it in a query is not "robust". OK, since you don't show that code I'll give you the benefit of the doubt.

Session data does have some vulnerability through cookie hijacking. It is a complex subject. OWAP does a much better job of explaining the pit falls than I could - read this.