Newbie Security Questions...

Hi all, First thankx for reading this !. I'm a Newbie in PHP, previously i was doing web stuff in perl. I want to do a site were you login, and depending on the login account the user receives a given set of permissions. From what i have studid the session management, were you start a session id, and can put in several variables... My question is this, this variables remain were ? on the user browser (cookies, url enconding ?) or does the user just receive the single session id, and the rest remain on the server ? This is a important security consideration for me. Any help will be great Stay well ! Miguel Angelo e-mail: miguel.angelo.lists@migas.mine.nu http://migas.mine.nu