I have built a shopping cart absed on Sessions. Basically, a user can add and delete items from the shopping cart, recording their items to a table. The "unique" identifier is the SessionID generated via PHP4.
A friend of mine states that "the best thing to do is take the sessionID at startup and put it in to a hidden text box which stays with the page - this txtbox should be on a frame that doesnt even go away.. or create a hidden frame." According to him, Sessions expire automatically after 20 minutes, and are thus not a good way to uniquely identify shoppers on your website.
Does anyone wish to comment?
To see the cart in question (under development) go to:
http://www.vineyardselection.com/index.php?topic=showcart
kp