A user is prompted for a user name and password and given a session cookie or session header.
用户会获得提示，要求输入用户名和口令，并将口令和密码保存在会话cookie或会话header中。
Cookie poisoning is a technique known mainly for achieving impersonation and breach of privacy through manipulation of session cookies that maintain the identity of the client (or end user).
cookie篡改(cookie poisoning)是一项主要以获取模拟和隐私权泄密著称的技术，通过维护客户(或终端用户)身份的会话信息操纵来实现的。
An identifier for the user or session is stored in a cookie and read on every request.
特定用户或者会话的标识符被存储在一个cookie中，并且在每次请求时读取。
应用推荐