If I understand it correctly, php uses cookies by default with sessions. If I were to pass the session ID by adding it to the url, either manually or automatically, would php still write a cookie on the user's computer? The reason that I ask is that I'd like to say to users that my site doesn't write cookies to their hard drives, but I don't want to inadvertently lie to them. Any ideas?