Session or cookies - usually it's the same stuff. If you have compiled PHP with --enable-trans-sid option, sessions are better. If not, you can hardcode id in all links on your site (quite a job to do) or just use cookies. Check the manual under "Function Reference/Session handling functions".