-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Chris Hope wrote:

[snip]
> Except you cannot rely on sessions. If they don't have cookies
> enabled in their browser then every request will appear to be from a
> new session.
>

Unless you use URL rewriting to carry the session ID. See "Passing the
Session ID", about 1/2 the way down this page:

http://php.net/manual/en/ref.session.php

Chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)

iD8DBQFBatStgxSrXuMbw1YRAlkhAJ95EpLJ2Vj+6uFp/k/ytiRBQbjq5QCgoo8J
T9zW4YBEE+kKsbV9svRIBmY=
=qmZh
-----END PGP SIGNATURE-----