1) I log in to the site in order to get the cookies;
2) Then i visit your script url so you can take my cookies;
3) You use that cookies to log in into my account and prove me you are in my account;
4) You show me what you did it;
5) Done !
## Deliverables
I'm not 100% sure this can be done. If i should check anything in that cookie/session to make sure the site don't bind cookies with ip, please let me know.