A cookie doesn't work, because people flush their cookies from time to time. Once they do, they'll get the disclaimer page back. You'd be better off maintaining a record on your server, via database, or a series of file placeholders, to keep track of who has seen your disclaimer page or not. Obviously, a database would be a more elegant solution...