how does session data manipulation work with cookies?

[eluser]MikeW1911[/eluser]
If I use the native PHP session method using session_start() and the $_SESSION array do I avoid the problem of clients editing the cookie file to change session values (other than the session id)?