sessions and 'normal practice'

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi all I have 2 questions relating to how session id's are passed from page to page: 1: My host uses the 'append to url and hidden fields' method. I dislike this as it makes my urls untidy and my pages won't validate. So, is it considered normal practice to do it this way? 2. I spent some time pouring over the manual and must be missing the point somewhere ;-) How can I explain/use the alternative to the above and if you believe I shouldn't, why? Hope someone will be kind enough to put this in simple terms for me, I just got a little lost in the manual and need a few facts before confronting my host. Many thanks.. - -- Nick Wilson // www.tioka.com -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (GNU/Linux) iD8DBQE89Nc7HpvrrTa6L5oRAt0KAJ9TfQv2a5j52D7VfCANZvRC6tfB5gCghqCU SXuXMzllAOq0GY19UK4mE0g= =EsWR -----END PGP SIGNATURE-----