Which of the following statements is true about PHP session hijacking?

A) PHP session hijacking can only occur when the attacker has physical access to the victim's computer.

B) PHP session hijacking can be prevented by using HTTPS instead of HTTP.

C) PHP session hijacking is a type of side-channel attack that exploits vulnerabilities in the cryptographic algorithms used to protect session data.

D) PHP session hijacking is a form of attack in which an attacker steals a victim's session ID and uses it to impersonate the victim.