please i have some questions about session and cookies ...

Question

sessions are like files which on the server .... it stores all information about users like passwords and emails....etc and it has got an ID
cookies are files stored in user's device and it stores information .... this information's kind is relaying on the company which owns the sites
and cookies have an ID also

am I right ? ( Yes or No)

is cookie's ID == session's ID ? or they are different?

if i reach victim's cookie's ID ....(which appear when i execute alert(document.cookie) in JS )
why i can take over this victim's account?

and what is cookie-based seesion?

and thank☺

Answer 1

Mirielle
good
and what about the other quistions?