HTTP Tunneling is a method for connecting to a server that uses the same protocol (http://) and the same port (port 80) as a web server does. A query is used to extract data from the database in a readable format according to the user's request. Sometimes you win, sometimes you learn. Such sessions are also susceptible to session hijacking, where a malicious user takes over your session once you have authenticated.