Browser based games were another wild west. The basic move was to post something mildly controversial in your "profile page" -- which often used the MySpace st

Browser based games were another wild west. The basic move was to post something mildly controversial in your "profile page" -- which often used the MySpace style of "whatever HTML you want" -- along with a cookie logger. Then be obnoxius in chat/forums. Pretty soon, an admin would visit your profile to check out the offending content and ban your account. In the process, they would give you their admin cookie. I was a dev/admin for a few of these browser-based games and would also poke at other people's games, so I was saw both sides of the arms race. That wild west still exists in browser based games, which were labors of love with large enough user bases to keep the steam going but not commercially viable enough to justify any sort of actual investment. There are still a half dozen or so browser based games running on huge piles of PHP written by middle schoolers and high schoolers in the mid to late 2000s. Many still have XSS and SQL injections lurking in forgotten little corner features.