Hey,
If you are using sessions already, why not go with htat/ Of course you could parse it in each and every link you use, but that becomes very messy very quickly..
Or, do as I do: I have a check-login script, which will basically check some encoded authorisation features from the session (Basically username, timestamp, PC-IP and an combined encoded combination of the above). If those are OK, a user-preferences script is run to get all the details from the server (Userdetails table in database).
This works well for settings which are not changed a lot. Every time a user logs-on (new session) these details are checked in the d.base. the rest of the session the details are just collected. All is in one single include in the head of the page, and this include also passes the page accesinfo to the database, which has to be stored seperately anyway..
J.