1. 0 2. takes the user back to home.php 3. cookie 1 name:isActive value:1 cookie 2 name userinfor value: This+cookie+could+store+sensetive+data 4. The user is taken to the blog page without having to log in 5. Takes the user to evilFake.html and then redirects to somethingcool.html the cookies values stayed the same 6. posted my comment and it translated it to h1 size posted the script and it showed and alert 7. You do not want sensitive information in a cookie due to cookies being semainly very accessable. 8.never trust the user and always sanitize the data