Quote Originally Posted by LapraS
In order to gain access to someones account?
Im referring to a game I play called Bootleggers.
Its online and textbased. I have made a profile hack once. I coded PHP and obtained SESSION Ids by people viewing my *00x*00 banner. I simply used a cookie editor ( firefox extension ) to add the SESSION.
Well, you would use a flaw such as cross site scripting to steal cookie data. XSS holes are common - there's one in the site you're looking at now.