Someone hides a code into a webpage, someone goes on that webpage then the person who did the code in the first place copies something into there URL bar and then it will reload and they will be logged into the victims account and it will disconnect them, they can then log back in and they will need to click the website again for them to be able to log back into there account.