just wondering what was the exploit? I'm learning about php and i wanna know if my own login script is exploitable..

right now I store user info in a cookie...