XSS nastiness

Set up an XSS on a friend's site that forced logout by resetting the session cookie. Even the admin couldn't log in
<snicker />
Anyhoo, on with bidness.