Cookies vs Sessions

[DeadFly]

Alright which would be better for a site with a simple login page, which has access to the users credit card.
The card number is of course hidden like xxxx xxxx xxxx 1234, and can not be fully seen except when the user initally inputs the number. The number will not be stored in the cookie or a session (obviously).

I can't use cookie based sessions, but I can use normal cookies, and non-cookie based sessions.

Any ideas which would be best ?

[flatpooks]

a simple login where u can see credit card details???
sounds dodgy to me
but if u must then i would use encrypted sessions vars that expire as soon as the browser closes (or after a timeout period)

[DeadFly]

no no, there is no credit card in the login . . .
but once the person logs in it will go to a section where there is credit card info . . .