3 ms·
So as i understand it , if you put the user id in a cookie it allows anyone to "spoof" the server and login as any user but sending just a fake cookie ?
by camus 14y ago
So as i understand it , if you put the user id in a cookie it allows anyone to "spoof" the server and login as any user but sending just a fake cookie ?