title: Can a user manipulate cookies?
body: <p>I have a question regarding usage of cookies for standard login purposes. Say my php script saves a cookie into a users computer each time he logs in. The cookie value is say "Mike" after his username at the website. Can that user somehow manipulate that cookie in his browser to change the value to say "Admin" so suddenly he has access to administration of the website?</p>
  
  <p>If this could happen how to solve such security risk?</p>
  
  <p>--</p>
  
  <p>Additionally... What if someone was to copy cookies from my browser, either he would stare at my computer screen and copy cookies and values into his computer or such intruder could steal cookies from my browser via JavaScript. </p>
  
  <p>How is that taken care of?</p>