> just trying to deal with the possibility that a user has cookies turned off.
I see. Well I've pretty much said my opinion on the cookie thing, but to reiterate, people not using cookies are such a minute percentage of the web. Unfortunately, I can't find any recent numbers anywhere, but I'm thinking it's probably less than 3%. I've always gotten the impression that the whole URLSessionFormat thing was useful 15 years ago when cookies weren't that wide-spread, but is a rarely used function nowadays. I think you will eventually have to come to a decision where you choose between catering to <3% or your traffic or choosing the most secure method. I'll let you make that decision, but I'll leave you with this article about how Google Apps is ceasing support for IE 6 because the security risk is too great and they would rather tick off 10% of the Internet who refuse to come out of the dark ages than continue dealing with the security holes. http://www.expertreviews.co.uk/general/275533/google-drops-internet-explorer-support-in-apps ~Brad ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330391 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4

