I discovered some of the downfalls of using the "GET" method last night. Particularly the way it passes confidential login data to the address box.
The method ednark suggested is easy to implement and works smoothly and transparently.
Don't try to register form variables separately though, or it won't work.
i.e. session_register('UserID');
Will cause the script to fail because UserID (a form variable) is already stored in the form array with:
$_SESSION['form'] = array();
That's actually one of the great things about doing it this way. All your form fields are stored to the session in one fell swoop.